NEWSPAPER 


Complexity  slowing  use  of  Web  data  analysis.  PAGE  42  Future  Watch:  Malicious  code  throat  looms,  PAGE  46 


IDG 

•  net 


COMPUIERW 


The  Newspaper  For  IT  Leaders  ■  www.computerworld.com 


APRIL  1,  2002  ■  VOL.  36  ■  NO.  14  ■  $5  COPY 


Guarding 

THE  i  ONLINE  w 


1  Companies  post  way  too  much 
proprietary  information  about 

- 1  their  products,  services  and 

employees  online.  Read  about  the  painful  lessons  that 
retailers,  banks  and  other  companies  have  learned  by 
allowing  competitive  information  to  fall  into  the  wrong  hands 
-  and  how  you  can  prevent  it  from  happening  to  you.  Story  starts  on  page  26 


USERS,  J.D.  EDWARDS  FACE  ARBITRATION 


Cases  involve  early 
rollouts  of  applications 


BY  MARC  L.  SONGINI 

The  fallout  from  problematic 
early  installations  of  J.D.  Ed¬ 
wards  &  Co.’s  One  World  busi¬ 
ness  applications  continues  to 
be  felt  by  the  vendor  and  some 
would-be  users  that  are  pursu¬ 
ing  legal  claims  against  it. 

Analysts  said  performance 
issues  and  functionality  gaps 
that  affected  some  early 


The  World  of 
OneWorld 

History:  The  software  was  intro¬ 
duced  in  1996  and  became  available 
the  next  year.  A  collaborative  OneWorld 
Xe  release  was  added  in  2000. 

Number  of  users:  1,300 

Key  components:  Distributed 
object  architecture,  built-in  business 
rules  engine,  Web-based  user  portal 

Operating  systems  supported: 

Windows  2000/Windows  NT,  AIX, 
HP-UX.  Solaris,  PS/400 


adopters  of  OneWorld  have 
long  since  been  resolved.  But 
J.D.  Edwards  this  month  is 
scheduled  to  go  into  prelimi¬ 
nary  arbitration  hearings  with 
Los  Angeles-based  Spectratek 
Technologies  Inc.,  which  is 
one  of  at  least  five  disgruntled 
customers  that  took  legal  ac¬ 
tion  after  running  into  prob¬ 
lems  on  OneWorld  rollouts. 

Spectratek,  a  maker  of  deco¬ 
rative  products  such  as  holo¬ 
graphic  films  and  glitter, 
alleged  in  a  lawsuit  filed  in 
June  2000  that  J.D.  Edwards 
didn’t  deliver  promised  data- 
sharing  and  bookkeeping  func¬ 
tions  in  the  OneWorld  release 
it  tried  to  install  under  a  con¬ 
tract  signed  in  late  1998. 

“The  system  wasn’t  ready 
yet  when  [Spectratek]  bought 
it,”  said  company  attorney 
William  McTaggart,  who  works 
at  Los  Angeles-based  law  firm 
Parker,  Milliken,  Clark,  O’Hara 
J.D.  Edwards,  page  16 


COPYRIGHT 
HOLDERS 
TURN  TO  IT 

Analysts  say  bill  requiring  vendors  to  block 
music,  video  piracy  could  hurt  tech  industry 


BY  PATRICK  THIBODEAU 

WASHINGTON 

Federal  legislation  mandating 
copyright  protection  technolo¬ 
gy  on  PCs  and  other  devices 
may  change  PC  and  software 
design  forever  and  even  block 
imports  of  machines  that  don’t 
meet  the  proposed  standard. 

The  bill,  introduced  by  U.S. 
Senate  Commerce  Committee 
Chairman  Fritz  Hollings  (D- 
S.C.),  would  require  hardware 
and  software  makers,  which 
are  opposing  it,  to  build  copy¬ 
right  protection  into  their 
products.  The  bill’s  initial  goal 
is  to  create  a  voluntary  techni¬ 
cal  standard  to  stop  piracy. 
If  the  bill  is  passed  and  a 
standard  isn’t  agreed  upon 
within  12  months,  the  Federal 
Communications  Commission 
would  develop  one. 

“I  think  it’s  a  very,  very  badly 


What’s  Going  On? 


The  chairman  of  the  Senate  Com¬ 
merce  Committee,  Fritz  Hollings, 
has  introduced  a  bill  mandating 
copyright  protection. 

The  bill  seeks:  Copyright  protec¬ 
tion  on  all  “digital  media  devices,” 
including  PCs. 

Scope:  The  bill  describes  only  what 
it  wants,  not  how  to  get  there. 

Significance:  Heavy  content 
industry  backing,  and  it’s  getting 
high-profile  attention  on  Capitol  Hill. 

Outlook:  Not  likely  to  pass,  but  may 
be  used  to  seek  voluntary  standards 
that  could  still  impact  corporate  IT. 

conceived  idea,”  said  David  J. 
Farber,  a  professor  of  telecom¬ 
munications  systems  at  the 
University  of  Pennsylvania  in 
Philadelphia  and  a  former 
chief  technologist  at  the  FCC. 

Copyrights,  page  57 


T  TO  HELP  BANKS 
FIND  LAUNDERERS 

Financial  firms  hustle 
to  be  ready  for  new  law 


BY  LUCAS  MEARIAN 

The  nation’s  banks  and  broker¬ 
ages  are  racing  to  beat  an  April 
24  deadline  to  have  in  place 
USA  Patriot  Act  compliance 
programs  that  are  aimed 
at  spotting  terrorists  who  may 


be  using  money-laundering 
schemes  to  finance  their  activ¬ 
ities. 

The  USA  Patriot  Act  was 
signed  by  President  Bush  in  Oc¬ 
tober  in  response  to  the  Sept.  11 
terrorist  attacks.  New  regula¬ 
tions  under  the  act  will  not  only 
extend  previous  anti-money¬ 
laundering  regulations  beyond 
banks  to  all  financial  service 
firms,  but  will  also  likely  re¬ 
quire  them  to  provide  the  U.S. 
Department  of  the  Treasury’s 
Financial  Crimes  Enforcement 
Launderers,  page  57 


WE  DIDN'T  JUST  JUMP  ON  THE 
INFRASTRUCTURE  BANDWAGON 

E  BUILT  IT 


IT'S  TIME  TO  SET  THE  RECORD  STRAIGHT 

LONG  BEFORE  OUR  COMPETITORS  EVEN  ADDED  THE  WORD  "INFRASTRUCTURE" 
TO  THEIR  VOCABULARY,  WE  WERE  BUSY  CREATING  IT.  SINCE  WE  FIRST  LAUNCHED 
UNICENTER®  IT  HAS  BECOME  THE  DE  FACTO  GLOBAL  STANDARD  FOR  MANAGING 

ALL  eBUSINESS  INFRASTRUCTURE.  BUT  WE  DIDN'T  STOP  THERE -WE'RE  ALSO 

THE  WORLD  LEADER  IN  SECURITY  AND  STORAGE  SOFTWARE.  EVERY  DAY,  OUR 
SOFTWARE  HANDLES  OVER  180  MILLION  TRANSACTIONS,  PROTECTS  $50  BILLION 
IN  WIRE  TRANSFERS  AND  STORES  40  MILLION  SECURITY  EXCHANGES.  EXPERTISE 

DOESN'T  HAPPEN  OVERNIGHT.  IT'S  TAKEN  25  YEARS  OF  HARD  WORK  AND 

LEADERSHIP  TO  GET  TO  BE  THE  BEST.  SO  WHEN  WE  SAY  YOU  CAN  TRUST  EVERY 
ONE  OF  OUR  18,000  EMPLOYEES  AROUND  THE  WORLD  TO  DELIVER  THE  SOFTWARE 
AND  SERVICE  THAT  YOUR  eBUSINESS'  SUCCESS  DEPENDS  ON,  WE  REALLY  MEAN  IT. 
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HELLO  TOMORROW 


WE  ARE  COMPUTER  ASSOCIATES 


THE  SOFTWARE  THAT  MANAGES  eBUSiNESS™ 
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Introducing  the  Mobile  Intel®  Pentium®  4  Processor  -  M. 


'  Road  warriors  rejoice.  The  all-new  Mobile  Intel®  Pentium®  4  Processor  -  M  is  here,  specifically 

- 

designed  for  mobility.  Intel’s  Micro  FCPGA  packaging  technology  enables  thin  and  light  notebooks 
;  for  added  portability.  And  Enhanced  Intel®  SpeedStep™  Technology  optimizes  application 
c .  performance  for  long-lasting  battery  power.  For  more  about  the  fastest  mobile  processors  in 
history,  visit  www.intel.com/ebusiness/mobile. 
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BIOTECH  SKILLS 
MATCHING 

IT  managers  like  Glaxo¬ 
SmithKline’s  Terry  Francis 
(left)  are  in  need  of  pro¬ 
grammers  and  data  manage¬ 
ment  experts  as  biotechnology 
and  pharmaceutical  firms  race 
to  decode  the  human  genome 
and  pave  the  way  for  medical 
breakthroughs.  PAGE  28 


3-D  ON  DISPLAY 

The  first  commercial  high-resolu- 
tion  imaging  system  that  lets  users 
see  an  object  in  true  3-D  offers  a 
walk-around  view.  PAGE  44 


NEWS  6 

6  Corporate  IT  concerns  are  now 

a  major  focus  of  the  Microsoft  anti¬ 
trust  case. 

7  Companies  in  need  of  tools  to 
help  them  manage  the  growing 
number  of  handhelds  in  the  enter¬ 
prise  get  some  welcome  relief. 

8  Some  developers  who  attended 
last  week’s  JavaOne  conference 
want  to  use  both  Java  and  Micro¬ 
soft’s  .Net  in  a  mixed  environment. 

10  A  new  report  says  that  two 
months  after  the  Sept.  11  attacks, 
a  lack  of  effective  corporate  disas¬ 
ter  recovery  planning  was  still 
widespread. 

12  VeriSign  finds  itself  bombard¬ 
ed  with  complaints  from  Web  site 
owners  who  don’t  like  the  domain 
name  registrar’s  business  tactics. 


pV.  For  breaking  news,  updated 

twice  daily,  visit  our  Web  site: 

f  | 1  .  www.computerworld.com/ 

LUllvV  q?q4000 


BUSINESS  25 

25  Paul  A.  Strassmann  aims  to 

dispel  a  myth  by  using  data  from 
the  last  decade  to  refute  a  view 
long  held  by  IT  consultants,  ven¬ 
dors  and  government  economists: 
that  the  more  money  a  company 
pours  into  IT,  the  lower  its  trans¬ 
action  costs  will  be. 

34  Book  Reviews:  Our  reviewers 
check  out  James  Champy’s  updated 
volume  on  business  process  re¬ 
engineering,  as  well  as  books  about 
how  the  Internet  has  changed  man¬ 
agers’  organizational  approaches 
and  how  to  handle  the  intergenera- 
tional  gaps  in  today’s  workplace. 

36  Videoconferencing  is  helping 
companies  like  Ernst  &  Young  and 
Bristol-Myers  Squibb  get  quick 
ROI  in  the  form  of  travel  savings 
and  increased  worker  productivity. 

38  Career  Adviser:  Fran  Quittel 
offers  advice  about  the  job  oppor¬ 
tunities  —  or  the  lack  thereof  — 
for  mainframe  specialists. 


TECHNOLOGY  41 

41  Nicholas  Petreley  takes  an 

April  Fool’s  look  at  the  recent  trou¬ 
bles  at  the  INS  and  acknowledges 
that  he  was  too  tough  on  Pacific  Bell. 

42  Business  analytics  over  the 

Web  can  provide  vital  information 
for  decision-makers,  but  integration 
issues  are  keeping  projects  small. 

46  Future  Watch:  Rampant  virus¬ 
es  and  worms  could  bring  down 
PDAs,  mobile  phones  or  even  the 
entire  Web  as  malware  evolves 
along  with  the  rest  of  IT. 

48  Security  Manager’s  Journal: 

Vince  Tuesday  is  skeptical  about 
the  value  of  security  certifications 
but  decides  that  sending  employees 
to  get  them  does  have  key  benefits. 

50  QuickStudy:  Random  numbers 
can  be  produced  by  physical  proc¬ 
esses  such  as  flipping  a  coin.  But 
software  can  create  only  “pseudo¬ 
random”  numbers.  Learn  more  in 
this  week’s  tutorial. 


OPINIONS  22 

22  Patricia  Keefe  says  there’s 
plenty  of  work  for  IT  organizations 
to  do  as  we  wait  for  the  economy 
to  begin  its  recovery. 

22  Pimm  Fox  takes  that  sugges¬ 
tion  a  step  further,  warning  that  IT 
personnel  won’t  be  loyal  when  the 
recession  is  over  unless  you  treat 
them  well  now. 

23  Thornton  May  writes  that 
IT  leaders  have  several  roles  to 
play  in  protecting  the  most  impor¬ 
tant  source  of  value  in  an  informa¬ 
tion-driven  economy:  intellectual 
property. 

58  Frank  Hayes  says  the  Navy 
has  a  laudable  goal  in  wanting  all 
of  its  new  IT  systems  to  work  with 
its  old  ones  —  but  that’s  impossible 
to  accomplish. 
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ANTITRUST  UPDATES 

For  the  latest  news  from  the  Micro¬ 
soft  antitrust  trial,  head  to  our 
Microsoft  Legal  Issues  page. 

www.computerworld.com/mslegal 


PROTECTION,  OR 
ASSAULT  ON  RIGHTS? 

Community  members  are  engaged 
in  a  lively  discussion  over  a  pro¬ 
posal  that  would  embed  copyright 
protection  into  PCs,  handhelds  and 
other  electronic  devices.  Have 
your  say  in  our  online  forum. 
www.computerworld.com/q7a1760 


THE  .NET  DECISION 

Microsoft  development  shops 
should  consider  all  options  —  in¬ 
cluding  delaying  projects  or  mov¬ 
ing  to  Java  —  before  going  forward 
with  new  projects  under  .Net,  says 
guest  columnist  Daniel  Mezick  in 
our  operating  systems  community. 
www.computerworld.com/ 
community/os 


PRIVACY  SPOTLIGHT 

This  week,  Computerworld.com 
introduces  a  monthly  column 
by  Jay  Cline,  who  will  take  a  criti 
cal  look  at  privacy  issues  from  a 
perspective  that’s  rarely  heard: 
the  corporate  privacy  manager’s. 
His  first  column  examines  the 
privacy  implications  of  the  war 
on  terrorism. 

www.computerworld.com/q728474 
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Oracle  to  Offer 
Outsourcing  on  9i 


Oracle  Corp.  this  week  plans  to  an¬ 
nounce  that  it  will  begin  offering 
outsourcing  services  to  users  of  its 
OracleQi  database  and  application 
server  software.  Oracle  said  it  will 
handle  day-to-day  administration 
tasks  on  those  products  for  cus¬ 
tomers  that  sign  outsourcing  deals. 
The  software  vendor  already  has  an 
outsourcing  program  for  its  E-Busi¬ 
ness  Suite  11i  applications. 


Microsoft  Issues  New 
Web  Browser  Patch 

Microsoft  Corp.  issued  a  software 
patch  designed  to  fix  two  newly  dis¬ 
covered  security  holes  in  its  Internet 
Explorer  Web  browser.  The  compa¬ 
ny  gave  a  “critical”  severity  rating 
to  the  vulnerabilities,  one  of  which 
could  let  attackers  place  malicious 
code  in  Internet  cookies  that  would 
be  saved  to  the  disk  drives  on  un¬ 
protected  PCs. 

Network  Associates 
Bids  on  McAfee.com 

Santa  Clara,  Calif.-based  Network 
Associates  Inc.  on  Friday  began  a 
tender  offer  aimed  at  giving  it  full 
control  of  antivirus  software  vendor 
McAfee.com  Corp.  Network  Associ¬ 
ates  had  postponed  the  offer  after 
disclosing  that  the  Securities  and 
Exchange  Commission  is  investigat¬ 
ing  its  past  accounting  practices 
(see  story,  page  20).  Sunnyvale, 
Calif.-based  McAfee.com  said  the 
offer  is  “financially  inadequate.” 

js  Ex  Global 
Crossing  Worker 

The  FBI  arrested  a  former  IT  worker 
U  Hamilton,  Bermuda-based  Global 

Crossing  Holdings  Ltd.  who  had 
J  personal  data  about  com- 
,  -an  amrioyees  on  his  Web  site. 

Sutcliffe,  41,  was  arrested  in 
V  f -  e\  N.H.,  and  charged  with 
:  <  :  i.-eats  via  the  Internet. 


Microsoft  Trial  Shifts 
Io  Enterprise  Concerns 

Software  integration,  porting  Office  to  Linux 
examined  as  court  continues  remedy  phase 


BY  PATRICK  THIBODEAU 

WASHINGTON 

orporate  IT  con¬ 
cerns  are  getting 
top  billing  in  the 
Microsoft  Corp. 
antitrust  trial  as 
the  federal  judge 
overseeing  the  case 
considers  proposed 
remedies  intended  to 
improve  server  integration  and 
desktop  competition  by  port¬ 
ing  Office  to  Linux. 

Carl  Ledbetter,  chief  tech¬ 
nology  officer  at  Novell  Inc., 
told  the  court  last  week  that 
Microsoft  hasn’t  disclosed  sev¬ 
eral  application  programming 
interfaces  (API)  “sorely  need¬ 
ed  to  improve  the  interoper¬ 
ability”  of  Windows  and  Net¬ 
Ware,  his  company’s  network 
operating  system. 

The  remedy  proposed  by  the 
nine  nonsettling  states  and  the 
District  of  Columbia  would 
give  Novell  and  other  firms  ac¬ 
cess  to  Microsoft’s  source 
code.  A  proposed  settlement 
agreed  to  by  Microsoft  and  the 
Bush  administration  requires 
Microsoft  to  disclose  APIs,  the 
doorways  between  programs, 
but  it  doesn’t  give  competitors 
direct  source-code  access. 

Interoperability  a  Concern 

The  interoperability  of  Net¬ 
Ware  with  Windows  applica¬ 
tions  is  a  concern  of  Hugh 
Winesett,  a  senior  systems  an¬ 
alyst  at  Southwest  Gas  Corp.,  a 
Las  Vegas-based  utility  with  1.3 
million  customers.  The  com¬ 
pany  runs  far  more  NetWare 
servers  than  Microsoft  servers 
but  uses  Microsoft  applica¬ 
tions  such  as  Excel.  And  Wine- 
sett  said  there  are  sometimes 
problems  with  performance 
and  file-saving  on  Novell 
servers. 

Southwest  Gas  remains 
committed  to  NetWare  be¬ 


cause  of  the  software’s  cost 
and  stability,  said  Winesett,  but 
there’s  pressure  to  change. 
Interoperability  issues  draw 
management  questions  that 
put  IT  managers  on  the  defen¬ 
sive.  “It  forces  you  into  a  Mi¬ 
crosoft  solution  be¬ 
cause  of  user  com¬ 
plaints,”  he  said. 

The  nonsettling 
states  would  also  require  Mi¬ 
crosoft  to  auction  Office  li¬ 
censes  to  rival  developers  so 
they  can  port  the  software  to 
other  operating  systems.  One 


company  likely  to  bid  on  such  a 
license  is  Linux  vendor  Red 
Hat  Inc. 

Michael  Tiemann,  chief 
technology  officer  at  Raleigh, 
N.C.-based  Red  Hat,  told  the 
court  last  week  that  support 
for  Office  is  “the  first  ques¬ 
tion”  asked  by  enterprise 
users.  Making  Office  available 
on  Linux  would  help  the  open- 
source  operating  system  im¬ 
prove  its  market  share,  which 
is  currently  2%,  he  added. 

IT  managers  agreed.  “If  Of¬ 
fice  were  available  for  a  Linux 
desktop,  there  would  be  a 
number  of  CIOs  who  would 
push  their  desktop  teams  to 
Linux,”  said  Brian  Kilcourse, 
the  CIO  at  Longs  Drug  Stores 


Corp.,  a  Walnut  Creek,  Calif.- 
based  retail  chain  with  about 
5,000  end  users. 

One  reason  Kilcourse  said 
he  would  consider  switching 
to  Linux  is  because  Microsoft 
is  making  it  “increasingly  diffi¬ 
cult  to  choose  enterprise 
tools”  such  as  Java  “that  aren’t 
Microsoft-based  on  the  server 
side.” 

Office  on  Linux  would  make 
it  possible  for  Jack  Billiel,  the 
IT  manager  at  dairy  H.R  Hood 
Inc.  in  Chelsea,  Mass.,  to  con¬ 
sider  installing  Linux  on  user 
laptops  —  if  he  knew  that  there 
would  be  no  technical  prob¬ 
lems  and  that  it  would  save 
money.  “If  it’s  not  going  to  be 
cost-effective,  why  would  I 
bother  making  the  change?”  he 
asked.  I 

^Yl  For  more  on 

V^LLH_JV  Microsoft’s  ongoing 
T  antitrust  case,  visit 

JLJLL  llSJi*  our  Web  site. 


www.computerworld.com/q?s1100 
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HP/Compaq  Brace  Workers 
For  Integration,  Layoffs 


Memo  sets  stage  for 
postmerger  plans 

BY  JAIKUMAR  VIJAYAN 

An  expanded  team  of 1,200  em¬ 
ployees  from  Hewlett-Packard 
Co.  and  Compaq  Computer 
Corp.  is  finalizing  postmerger 
integration  plans  even  as  the 
two  companies  await  formal 
notification  that  HP  share¬ 
holders  have  approved  their 
proposed  $21  billion  merger. 

Webb  McKinney  at  HP  and 
Jeff  Clarke  at  Compaq,  who  are 
leading  the  merger  integration 
planning  team,  last  week  said 
in  a  memo  sent  to  employees 
of  both  companies  that  the 
process  is  on  track. 

“One  of  our  key  goals  from 
the  start  of  this  process  was  to 
make  sure  the  new  company 


Quick 

Link© 


For  complete 
coverage  of  the 
HP/Compaq  merger, 
visit  our  Web  site: 


www.computerworld.com/q7a1650 


would  be  prepared  to  open  its 
doors  and  hit  the  ground  run¬ 
ning  in  the  April-May  time 
frame.  We  are  on  target  to 
reach  this  goal,”  the  memo 
stated. 

“Of  course,  there 
has  been  some  level  of 
coordination  between 
the  two  companies, 
but  up  to  now  most  of 
it  has  been  at  a  fairly 
high  level,”  said 
Dwight  Davis,  an  ana¬ 
lyst  at  Boston-based 
Summit  Strategies  Inc. 

“Now  comes  the  tough 
part,  when  you  have  to 
get  down  to  the  nitty- 
gritty  details”  of  figur¬ 
ing  out  product  line 
strategies  and  decid¬ 
ing  who  stays  and  who 
goes,  he  said. 

A  launch  team  has 
been  created  within 
the  integration  team  to 
deal  with  prelaunch, 
launch  day  and  post¬ 
launch  communica¬ 


tions,  the  HP  memo  stated. 
The  goal  is  to  make  sure  that 
all  employees  have  access  to 
the  same  information  at  the 
same  time. 

In  a  separate  memo  to  em¬ 
ployees,  HP  CEO  Carly  Fiori¬ 
na  and  her  counterpart  at 
Compaq,  Michael  Capellas, 
discussed  competitors  “who 
are  trying  to  take  advantage 
of  our  current  situation  to 
spread  fear,  uncertainty  and 
doubt  among  our 
customers.” 

“Putting  anything 
on  hold  while  we  wait 
for  a  final  proxy  vote 
tabulation  is  simply 
not  an  option,”  the 
memo  added. 

FIORINA  and  Over  the  next  week, 

HP  await  final  employees  from  both 

approval  from  companies  can  expect 

shareholders.  to  get  details  on 

the  new  management 
team’s  direct  reports, 
organizational  struc¬ 
ture  and  the  selection 
process  that  will  be 
used  to  fill  jobs  in  the 
new  company,  the 
memo  said. 

CAPELLAS:  Ri-  HP  and  Compaq 

vals  are  spread-  previously  disclosed 

ing  fear,  uncer-  that  15,000  jobs  will  be 

tainty,  doubt.  eliminated.  I 
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IT  Teams  Get  Much-Needed 
Tools  to  Manage  Handhelds 


Remote  shut-off, 
program  updates 
among  features 


BY  MATT  HAMBLEN 

With  handheld  devices  becom¬ 
ing  increasingly  common  in 
the  workplace,  IT  managers 
have  been  searching  for  effec¬ 
tive  device-management  tools 
to  send  software  updates  and 
to  shut  down  devices  contain¬ 
ing  vital  data  if  they’re  lost  or 
stolen. 

Two  user  companies  an¬ 
nounced  rollouts  of  software 
to  manage  handheld  devices 
last  week,  one  using  a  wireless 
network.  The  IT  managers  in 
charge  of  the  projects  declared 
the  early  results  impressive. 

“There  have  been  lots  of  arti¬ 
cles  and  talk  by  analysts  about 
the  risk  of  having  intellectual 
property  on  handheld  devices 
outside  the  firewall”  that  could 
be  lost,  said  Tom  Herzog,  com¬ 
munications  tools  manager  at 
Mentor  Graphics  Corp.  in 
Wilsonville,  Ore.  “These  things 
are  walking  time  bombs.” 

But  Mentor  Graphics  now 
uses  Afaria  device  manage¬ 
ment  software  from  XcelleNet 
Inc.  in  Alpharetta,  Ga.  And 
with  it,  Herzog  said,  “we  think 
we  have  that  security  problem 
better  mitigated.” 

A  provider  of  hardware  and 
software  for  designing  elec¬ 
tronics  products.  Mentor 
Graphics  has  about  250  Black- 
Berry  wireless  devices  from 
Research  In  Motion  Ltd.  in  Wa¬ 
terloo,  Ontario,  in  the  hands  of 
salespeople  and  managers 
worldwide.  The  company  be¬ 
gan  the  rolling  out  Afaria  to 
track  handhelds  and  improve 
security  in  December. 

A  dozen  cases  have  been  re¬ 
ported  of  users  losing  the  de¬ 
vices,  sometimes  without  pass¬ 
word  protection  enabled.  Men¬ 
tor  Graphics  was  able  to  turn 
off  those  devices  remotely, 
Herzog  said.  The  software  is 


also  able  to  match  a  device  with 
a  user  so  that  when  airtime 
bills  are  received,  the  company 
can  quickly  decide  how  to 
charge  internal  workgroups. 
Moreover,  Afaria  gives  Mentor 
Graphics  the  ability  to  push 
applets  to  salespeople,  who 
can  use  those  applets  to  access 
information  on  customers. 

At  less  than  $60  per  seat,  the 
software  is  well  worth  it,  Her¬ 
zog  said.  “How  do  you  put  a 
price  on  the  potential  of  losing 
vital  data?”  he  noted. 

Meanwhile,  Nancy  Braatz, 
senior  technology  analyst  at 


BY  LUCAS  MEARIAN 

Thomson  Financial  is  in  the 
midst  of  rolling  out  XML  tag¬ 
ging  software  that  will  auto¬ 
mate  the  indexing  of  invest¬ 
ment  analyst  reports  as  part  of 
an  effort  aimed 
at  giving  cus¬ 
tomers  greater 
search  capabili¬ 
ties.  In  turn,  the  financial  in¬ 
formation  provider  is  expect¬ 
ing  enough  of  an  uptick  in  sales 
and  cost  savings  to  generate  an 
18-month  return  on  investment. 

Thomson  is  part  of  a  grow¬ 
ing  number  of  financial  ser¬ 
vices  companies  to  jump  on 
the  XML  bandwagon.  “In  fi¬ 
nancial  services,  there’s  a  lot  of 
interest  in  this  type  of  technol¬ 
ogy.  In  some  respects,  the 
economy  really  put  a  lid  on  the 
budget  to  pay  for  it,”  said  Laura 
Ramos,  an  analyst  at  Giga  In¬ 
formation  Group  Inc.  in  Cam¬ 
bridge,  Mass.,  who  added  that 
she  expects  to  see  more  banks 
and  brokerages  experiment 
with  XML. 

Some  financial  services  firms 
are  doing  more  than  experi- 


[Handheld  de¬ 
vices]  are  walk¬ 
ing  time  bombs. 

TOM  HERZOG,  COMMUNICATIONS 
TOOLS  MANAGER, 

MENTOR  GRAPHICS  CORP. 

Waukesha  Engine,  Dresser 
Inc.,  has  installed  ZENworks 
for  Handhelds  4.7  from  Novell 
Inc.  to  manage  70  iPaq  hand¬ 
helds  from  Compaq  Computer 
Corp.  The  Waukesha,  Wis.- 
based  company  can  now  for¬ 
ward  software  updates  or  stan¬ 
dard  documents  to  users’  de¬ 


menting  with  the  development 
schema.  Metropolitan  Life  In¬ 
surance  Co.  is  building  a  real¬ 
time  relational  database  based 
on  XML,  and  Fidelity  Invest¬ 
ments  recently  completed  an 
enormous  retro¬ 
fit  of  its  corpo¬ 
rate  data  to  an 
XML  format. 

Every  month,  New  York- 
based  Thomson  has  been  man¬ 
ually  indexing  40,000  eight-  to 
12-page  Portable  Document 
Format  financial  reports  about 


Playing  Tag 

Tips  for  developing  XML 
tagging  systems: 

Understand  where  the 
company  stands  in  the 
development  of  an  over¬ 
all  information  life  cycle.  For 

example,  is  terminology  well  under¬ 
stood  and  agreed-upon,  or  are  in¬ 
dustry  standard  terms  sufficient? 

Determine  how  the 
business  process  will 


vices  without  any  user  inter¬ 
vention,  said  Braatz. 

The  rollout  is  “very  cost¬ 
and  time-effective”  she  added, 
especially  since  the  growing 
number  of  handhelds  has  to  be 
managed  by  a  static  number  of 
IT  workers.  The  per-user  li¬ 
cense  fee  is  $59. 

Currently,  Waukesha  Engine 
users  must  synchronize  the 
iPaqs  in  a  cradle  to  get  the  up¬ 
dates.  But  the  company  is  con¬ 
sidering  a  wireless  LAN  that 
would  enable  updates  directly 
to  the  devices,  Braatz  said. 

Analysts  described  the  roll¬ 
outs  as  good  examples  of  how 
the  device  management  mar¬ 
ket  is  starting  to  grow  as  the 
number  of  handheld  users 
mushrooms.  There  are  more 
than  31  million  mobile  workers 
in  Western  Europe,  Latin 


various  companies  and  indus¬ 
tries.  Thomson  then  posts  the 
information  on  a  secured  Web 
site  to  sell  to  the  financial  ser¬ 
vices  industry. 

Thomson  hired  about  15  data 
indexing  specialists  to  “crude¬ 
ly  index”  120  documents  each 
day  by  hand  so  customers  can 
search  for  specific  reports,  ac¬ 
cording  to  Jeffrey  Mastendino, 
vice  president  of  content  man¬ 
agement  at  Thomson  Finan¬ 
cial.  It  took  about  six  months 
to  train  the  specialists,  and  the 
process  was  time-consuming, 
labor-intensive  and  often  in¬ 
consistent,  he  said. 

In  December,  Thomson  and 
New  York-based  ClearForest 


use  the  XML  tags/categories.  If 

accurate  information  retrieval  across 
disparate  systems  is  key,  then  a  dis¬ 
tributed  tagging  process  may  pro¬ 
vide  the  best  value.  If  analyzing  and 
discovering  relationships  between 
documents  is  key,  then  the  ability  to 
mine  the  entire  body  of  document 
classifications  is  required. 

Experiment  with  the 
tools  before  buying. 

Bring  in  participants  from  all 
of  the  important  organizations  to 
participate  in  the  evaluation. 


America  and  the  U.S.,  and  that 
number  should  almost  double 
by  2004,  according  to  IDC  in 
Framingham,  Mass. 

About  20  vendors  offer  de¬ 
vice  management  products,  in¬ 
cluding  some  that  will  function 
over  bandwidth-constrained 
wireless  networks.  XcelleNet 
and  some  other  players  have 
reputations  for  managing  lap¬ 
tops  and  are  now  extending 
that  capability  to  handhelds, 
analysts  said  [“Wireless:  Seek¬ 
ing  New  Management,”  Page 
32,  Dec.  10].  Novell  bought 
Wheaton,  Calif.-based  Callisto 
Software  Inc.  in  December  to 
enter  the  market.  I 


f  For  more  on  this 

wUlLl\  subject,  visit  our 
r  handheld  special 

I  Jl  focus  page. 


Corp.  signed  a  deal  worth 
“hundreds  of  thousand  of  dol¬ 
lars”  that  calls  for  Thomson  to 
use  ClearForest  XML-tagging 
software  that  will  automatical¬ 
ly  set  up  research  documents 
for  archiving  and  offer  more 
precise  searches  on  data,  ac¬ 
cording  to  Mastendino. 

The  initial  ClearForest  im¬ 
plementation  should  be  com¬ 
pleted  this  quarter  and  deliver 
some  heady  returns,  said  Mas¬ 
tendino.  “We  think  on  the  re¬ 
port-level  side  it’s  going  to  be 
pretty  significant  to  savings. 
Turnaround  time  will  be  al¬ 
most  immediate  for  the  bulk  of 
documents,”  he  said.  “The  im¬ 
plementation  we  designed  will 
be  able  to  handle  that  systemat¬ 
ically,  and  probably  two-thirds 
of  the  research  will  be  able  to 
be  handled  automatically.”  I 


Get  management  buy- 
in  on  the  process  and 
the  resources  needed  to 
support  these  products.  Vendor 
claims  can  make  this  technology 
appear  to  deliver  much  more  au¬ 
tomation  than  it  does  in  practice. 

Establish  a  project 
champion  early  in  the 

process.  The  best  champi¬ 
on  may  come  from  the  business  unit 
where  the  subject-matter  resources 
are  most  closely  aligned  with  the 
business  vocabulary. 
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Thomson  Turns  to  XML  for  Report  Indexing 

‘ Tagging ’  effort  marks  start  of  many 
XML  projects  to  emerge  from  Wall  Street 
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Some  Users  See  Java  on 

Back  End,  .Net  on  Front  End 


Mixed  environment  could  prove  useful 
for  some  large  companies ,  analysts  say 


BY  CAROL  SLIWA 

SAN  FRANCISCO 

ANIEL  JEPP  is  a 
Java  developer  at 
a  London-based 
investment  bank. 
But  in  two  weeks, 
he  will  be  taking  a  course  on 
Microsoft  Corp.’s  new  .Net  de¬ 
velopment  environment. 

Jepp,  a  speaker  at  last  week’s 
JavaOne  conference  here,  said 
his  company,  Dresdner  Klein- 
wort  Wasserstein,  is  keen  to 
use  .Net  on  the  front  end  of  its 
applications  and  Java  2  Enter¬ 
prise  Edition  (J2EE)  technolo¬ 
gies  on  the  back  end. 

While  Dresdner’s  scenario 
didn’t  represent  the  norm 
among  attendees  randomly 
polled  at  the  Java  conference, 
signs  are  emerging  that  the 
firm’s  tactic  may  be  explored 
by  other  large  companies. 

Mike  Gilpin,  an  analyst  at 
Cambridge,  Mass.-based  Giga 
Information  Group  Inc.,  said 
the  notion  cropped  up  fre¬ 
quently  at  his  firm’s  recent  ap¬ 
plication  developer  confer¬ 
ence  in  London.  Attendees 
said  the  chief  reason  they  need 
.Net  and  J2EE  to  interoperate  is 
to  run  .Net  front  ends  against 
J2EE-based  back  ends,  he  said. 

Giga  analyst  Randy  Heffner 
said  the  fundamental  shift 
paving  the  way  for  such  inter¬ 
operation  is  Web  services.  In 
the  past,  Microsoft  and  Java 
technologies  could  be  made  to 
work  together  through  the 
Common  Object  Request  Bro¬ 
ker  Architecture  (CORBA), 
Microsoft’s  Distributed  Com¬ 
ponent  Object  Model  (DCOM) 
or  Remote  Method  Invocation 
(RMI),  he  said. 

But  since  there  was  no  built- 

(AMfe  v>.« m .  '■II1IT1— 

L  Yl  Sun  will  now  allow 

V  /UlviV  open-source 
J  j .  <’t£|  implementations  of  its 
I  *  Java  specifications: 
t  a  ■  l  -  !:cu't?-,«>rtd.com/q?28529 


in  support  for  the  technologies 
in  products  and  no  cross-plat¬ 
form  agreement  “among  Mi¬ 
crosoft  and  everybody  else,” 
the  approach  got  pushed  “to 
the  realm  of  special  tools,” 
Heffner  said.  Now  that  Mi¬ 
crosoft  and  Java  vendors  are 
building  support  for  XML,  the 
Simple  Object  Access  Protocol 
and  other  Web  services  tech¬ 
nologies  into  their  products, 
the  .Net/J2EE  option  may  get 
considered,  he  said. 

Gilpin  said  the  approach  can 
work  well  for  companies  that 
need  a  rich  user  experience  on 
a  Windows  client,  because  “.Net 
has  a  real  advantage  in  creating 
that.”  He  said  a  company  might 
do  that  in  combination  with 
a  J2EE  or  J2EE/Web  services 
back  end  “if  they  need  the  flexi¬ 
bility/portability  or  integration 


BY  CAROL  SLIWA 

SAN  FRANCISCO 

Java  creator  James  Gosling,  a 
vice  president  and  fellow  at 
Sun  Microsystems  Inc.,  shared 
with  Computer-world  his  views 
on  Microsoft  Corp.’s  rival  .Net 
development  environment, 
its  new  C#  language  and  its 
promotion  of  Web  services, 
during  last  week’s  JavaOne 
conference. 

Is  there  anything  in  the  .Net  archi¬ 
tecture  that  you  actually  admire? 

Chutzpah. ...  I  guess  I  found  it 
really  disappointing.  I  mean, 
there  had  been  all  kinds  of  ru¬ 
mors  and  that  about  what  their 
Common  Language  Runtime, 
and  what  this  new  [C#]  langu¬ 
age,  was  going  to  be.  And  we 
were  sort  of  imagining  all 
kinds  of  clever  things  that  they 
could  do.  They  didn’t  choose 


capabilities  those  J2EE  prod¬ 
ucts  offer  on  the  back  end  but 
can’t  suffice  with  the  best,  rich 
GUI  that  Java  can  offer.” 

The  downsides  of  the  ap¬ 
proach  —  complexity  and  cost 
—  make  it  worthwhile  only  if 
there’s  a  great  business  need  for 
a  rich  user  experience,  Gilpin 
said.  For  instance,  a  rich  graphi¬ 
cal  user  interface  for  a  call  cen¬ 
ter  operator  might  save  a  com¬ 
pany  millions  of  dollars  if  the 
average  service  call  is  reduced 
by  even  three  seconds,  he  said. 

Thomas  Murphy,  an  analyst 
at  Stamford,  Conn.-based  Meta 
Group  Inc.,  said  he  expects  that 
companies  will  take  the  combi¬ 
nation  approach  —  a  .Net  front 
end  and  J2EE  back  end  —  to 
better  utilize  developers’  skills. 
He  said  those  trained  in  Java 
might  work  on  back  ends  and 
those  skilled  in  Microsoft’s  Vi¬ 
sual  Basic  and  Active  Server 
Pages  on  front  ends,  since 
Microsoft’s  technology  is  cur¬ 
rently  better  for  building  thin- 


to  do  any  of  them.  I  found  it 
sort  of  puzzling. 

What  could  they  have  done?  They 
certainly  could  have  been 
more  creative  about  the  lan¬ 
guage.  They  could  have  been 
more  careful  about  things  like 
the  memory  model.  They  had 
certain  things  that  were  im¬ 
posed  on  them,  like  the  fact 
that  they  had  to  support  C  and 
C++  meant . . .  effectively  crip¬ 
pling  the  memory 
model  with  these 
sort  of  loophole  con¬ 
structions,  which 
really  cripples  the 
reliability  and  secu¬ 
rity  stories. . . . 

I  guess  one  of  my 
pet  areas  is  scientific 
computation.  They 
might  have  done 
something  creative 


.Net  vs.  J2EE: 

An  Informal  Poll 

Percentage  of  developers 
planning  to  use  one  envi¬ 
ronment  or  the  other: 

40.79%  Only  J2EE 

19.74%  Only  .Net 

34.21%  Both  J2EE  and 
.Net  (equal  commitment) 

5.26%  Other  (CORBA. 

proprietary,  etc.) 

SOURCE:  GIGA  INFORMATION  GROUP  INC., 
CAMBRIDGE.  MASS.:  POLL  OF  76  ATTENDEES 
AT  GIGA  APPLICATION  DEVELOPMENT  CON¬ 
FERENCES  IN  LONDON  (FEB.)  AND  AMELIA 
ISLAND,  FLA.  (MARCH) 


client,  browser-based  applica¬ 
tions  that  use  dynamic  HTML. 

But  if  companies  use  the  Mi¬ 
crosoft  user  interface  with  Java 
business  components,  perfor¬ 
mance  will  probably  suffer  and 
the  application  will  be  harder 


to  make  that  easier.  They  might 
have  done  something  creative 
around . . .  integrating  business 
logic  into  the  language. 

What  would  you  tell  corporate  IT 
people  who  are  debating  between 
.Net  and  Java  2  Enterprise  Edition 
(J2EE)?  I  think  the  most  impor¬ 
tant  thing  I’d  say  to  people 
comparing  J2EE  vs.  .Net  is  that 
J2EE  is  a  market,  [and]  .Net  is  a 
product _ You’ll  Find  hun¬ 

dreds  of  companies 
with  components 
and  tools  and  app 
servers  in  the  J2EE 
world.  The  way  it’s 
organized,  the  com¬ 
munity  actually  con¬ 
trols  what  happens. 

It  isn’t  just  dictated 
to  them.  It’s  a  very 
different,  very  differ¬ 
ent  beast  from  sort  of 


Gosling  Says  .Net  Falls  Short  of  Expectations 


GOSLING:  .Net  is 
“disappointing,”  its 
features  “puzzling.” 


to  debug  and  maintain,  Mur¬ 
phy  cautioned. 

Jepp  said  his  company  aims 
to  use  Microsoft’s  drag-and- 
drop  tools  to  put  together  front 
ends  very  rapidly.  He  added 
that  the  bank  probably  wants 
to  hedge  its  technology  bets. 
“Nobody’s  sure  exactly  where 
this  market  is  going  to  be  in 
five  years’  time  —  Java  or  Mi¬ 
crosoft.  So  I  think  they  want  a 
little  bit  of  both,”  he  said. 

Large  firms  expect  to  use 
both  Java  and  .Net,  according 
to  some  polls,  but  the  surveys 
typically  don’t  distinguish  be¬ 
tween  front-  and  back-end  use. 

One  developer  with  a  major 
pharmaceutical  company,  who 
asked  not  to  be  identified,  said 
large  companies  have  to  watch 
for  any  technology  that  might 
be  useful  to  guard  against  ven¬ 
dor  lock-in.  He  said  he  has  al¬ 
ready  been  visited  by  two  ven¬ 
dors  promoting  .Net  and  that 
he  expects  to  evaluate  it. 

But  David  Eng,  a  software 
engineer  at  Bethesda,  Md.- 
based  Lockheed  Martin  Corp., 
said  his  firm  may  be  hesitant  to 
use  .Net  because  it  is  untested. 
“A  lot  of  our  projects  are  gov¬ 
ernment,  and  [the  technology] 
has  to  be  reliable,”  he  said.  I 


a  socioeconomic  point  of  view. 
Technologically,  there’s  a  lot 
more  there  in  J2EE. 

You  look  at  all  the  [appli¬ 
cation  programming  inter¬ 
faces]  . . .  the  sets  of  tools  avail¬ 
able.  I  mean,  there  isn’t  just 
one  way  to  do  networking. 

Some  corporate  users  have  ex¬ 
pressed  an  interest  in  using  .Net  for 
the  front  end  and  Java  on  the  back 
end.  How  does  that  strike  you?  It’s 
certainly  the  case  that  Micro¬ 
soft  pretty  much  has  an  ab¬ 
solute  monopoly  on  the  client 
—  certified  and  convicted.  And 
so  in  some  sense,  that  makes  it 
sort  of  easier  for  them  on  the 
client  end.  I  think  these  folks 
would  be  amazed  to  discover 
how  easy  it  is  to  write  client 
software  on  the  PC  in  Java. 

That  works  very  well.  And 
from  a  personal  point  of  view,  I 
personally  actually  read  the 
[Windows]  XP  license  and  de¬ 
cided  I  couldn’t  sign  it.  So  I’ve 
been  shifting  over  to  Mac.  I 
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Now  you  can  use  IP  technology  to  extend  your  storage  network  by 
delivering  remote  access  to  centralized  storage  and  interconnecting 
data  centers.  You'll  benefit  by  lowering  operating  costs  through 
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Cisco  AVVID  enterprise  architecture,  you  can  do  all  this  without  any  disruption.  This  standardized  enterprise 
architecture  allows  you  to  seamlessly  integrate  voice,  video,  wireless,  storage,  and  data  applications  on  a  single, 
scalable  network. This  includes  new  and  existing  technologies  alike.  Whether  you're  building  your  enterprise 
network  or  extending  it  with  Cisco  Powered  Network  services,  take  advantage  of  the  tools  below  to  get  it  done  right. 
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CA  in  New  Dust-up 
With  Investment  Firm 


Dallas-based  Ranger  Governance 
Ltd.,  the  investment  firm  that  last 
year  waged  an  unsuccessful  fight  for 
control  of  Computer  Associates  In¬ 
ternational  Inc.’s  board,  fired  a  new 
salvo  in  the  form  of  an  open  letter 
urging  shareholders  to  oust  CA's 
chairman,  CEO  and  chief  financial 
officer.  Islandia,  N.Y.-based  CA  said 
Ranger’s  missive  was  “misleading, 
self-serving  and  inaccurate.” 


Oracle  Combines  ERP, 
CRM  Development 

Oracle  Corp.  said  it’s  combining  the 
groups  that  develop  its  enterprise 
resource  planning  (ERP)  and  cus¬ 
tomer  relationship  management 
(CRM)  applications.  The  operation 
will  be  headed  by  Ron  Wohl,  an  ex¬ 
ecutive  vice  president  who  had  been 
in  charge  of  the  ERP  unit.  Oracle 
said  it  is  aiming  to  reduce  distinc¬ 
tions  between  the  applications. 


Computer  Glitch 
Disrupts  Barclays 

London-based  Barclays  Bank  PLC 
disclosed  that  a  systems  glitch 
disrupted  customer  deposits,  elec¬ 
tronic  bill  payment  services  and 
other  transactions.  The  problem 
occurred  when  computers  that  con¬ 
nect  Barclays  to  the  U.K.’s  Bankers 
Automated  Clearing  System  net¬ 
work  failed.  The  reasons  for  the 
failure  weren’t  clear,  but  Barclays 
said  it  was  able  to  fix  the  glitch. 

Short  Takes 

ILSvs  upgraded  its  WebSphere 
e-commerce  software  and  an¬ 
nounced  new  middleware  that 
supports  Web-based  clearance  of 
payments  between  financial  institu- 
:■  us. . . .  Portland,  Ore.-based  DIS- 
\  )  MANAGEMENT  TASK 

which  is  developing 
•  rabifity  standards  for  IT 
turwnt  tools,  gave  ORACLE 
:  t  o  Is  board  of  directors. 


Disaster  Recovery 

Planning  Still  Lags 


Worldwide  survey  shows  many  firms  lack 
bare-bones  strategy  in  wake  of  Sept.  11 


BY  DAN  VERTON 

Two  months  after 
the  Sept.  11  terror¬ 
ist  attacks,  the  lack 
of  corporate  disas¬ 
ter  recovery  and 
business  continuity  planning 
was  still  widespread,  accord¬ 
ing  to  a  newly  released  survey. 

Conducted  in  November  by 
accounting  and  consulting  firm 
Ernst  &  Young  International, 
the  survey  polled  459  CIOs  and 
IT  directors  from  companies 
of  various  sizes  worldwide. 
The  results  were  released  in 
late  March.  The  survey  found 
that  only  53%  of  those  compa¬ 
nies  had  business  continuity 
plans  to  keep  operations  going 
in  the  event  of  a  major  disaster 
and  that  less  than  half  had  IT 
security  awareness  and  train¬ 
ing  programs  for  employees. 

Nathaniel  Meyer,  a  spokes¬ 
man  for  New  York-based  Ernst 
&  Young,  said  the  survey  tar¬ 
geted  midsize  to  large  compa¬ 
nies  in  all  economic  sectors 
throughout  17  regions  of  the 
world,  including  the  U.S.  and 
Europe.  None  of  the  compa¬ 
nies  surveyed  were  small  busi¬ 
nesses,  Meyer  said. 

The  Larger  Picture 

Some  CIOs  and  security  ex¬ 
perts  contacted  by  Computer- 
world  last  week  said  they 
weren’t  sure  of  the  significance 
of  the  results  without  having 
a  breakdown  of  the  sizes  of 
the  companies  surveyed.  Some 
also  questioned  any  expecta¬ 
tion  that  companies  would  nec¬ 
essarily  have  disaster  recovery 
plans  in  place  just  two  months 
after  the  attacks  if  no  such 
plans  had  already  existed.  Oth¬ 
ers,  however,  said  two  months 
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was  plenty  of  time,  given  the 
nature  of  the  wake-up  call. 

Nancy  Bryant,  CIO  at  1st 
City  Savings  Federal  Credit 
Union  in  Los  Angeles,  said 
there’s  no  reason  that  compa¬ 
nies  shouldn’t  be  able  to  put  a 
basic  business  continuity  plan 
in  place  within  two  months.  “It 
doesn’t  need  to  have  the  fancy 
writing,  but  a  bare-bones  plan 
could  be  in  place  within  two 
months,”  said  Bryant.  “We’re 
not  talking  a  great  outlay  of 
money,  either.” 

Bryant  said  she  has  outfitted 
all  of  her  employees  at  six 
branch  offices  with  remote  ca¬ 
pabilities,  and  the  company  is 
prepared  to  move  to  a  co-loca¬ 
tion  facility  if  the  main  office  is 
affected  by  a  disaster. 

“A  company  can  put  in  the 
structure,  policies  and  proce¬ 
dures  of  a  continuity  plan  and 


can  convene  a  steering  com¬ 
mittee  of  all  the  parties  that 
would  need  to  be  involved  in 
such  a  plan,”  said  Alan  Paris, 
a  partner  at  Capco,  a  financial 
services  consulting  firm  locat¬ 
ed  near  ground  zero  in  Man¬ 
hattan.  “They  can  also  do  an 
assessment  of  readiness.  With¬ 
in  two  months,  you  can  certain¬ 
ly  do  that  much.” 


Back  Burner 

Disaster  recovery  still  isn’t  a 
central  component  of  many 
corporate  strategies: 

OQO/  of  survey  respondents  said 
Lt)  / 0  business  continuity  plan¬ 
ning  is  a  business  unit  expenditure. 

A  CQ/  of  respondents  said  their 
Tru  /0  disaster  planning  expense 
is  borne  by  the  IT  budget. 

A  QQ/  of  respondents  said  their 
/0  disaster  plans  have  actually 
been  tested. 


SOURCE:  ERNST  &  YOUNG  INTERNATIONAL.  NEW 
YORK.  SURVEY  OF  459  CIOs  AND  IT  DIRECTORS 


Sean  Scott,  CIO  at  law  firm 
Womble  Carlyle  Sandridge  & 
Rice  PLC  in  Winston-Salem, 
N.C.,  said  six  months  is  a  more 
realistic  expectation,  given  the 
number  of  people  and  posi¬ 
tions  in  a  midsize  or  large  en¬ 
terprise  that  must  be  involved 
in  a  recovery  plan. 

But  Keith  Morgan,  chief  of 
information  security  at  Ter- 
radon  Communications  Group 
LLC,  a  Nitro,  WVa.-based  con¬ 
tent  management  firm,  said 
the  survey  results  pertaining  to 
disaster  recovery  plans  “should 
terrify  executives.” 

Rick  Fleming,  vice  president 
of  operations  at  Digital  Defense 
Inc.,  a  security  firm  in  San  Anto¬ 
nio  that  conducts  audits  for  the 
financial  industry,  said  of  the 
survey  finding  that  “things  re¬ 
ally  are  that  bad,  maybe  worse.” 

“These  numbers  are  gener¬ 
ous  and  probably  reflect  aware¬ 
ness  of  the  typical  Fortune  500- 
type  company  that  [Ernst  & 
Young]  works  with,”  said  Flem¬ 
ing.  “It  only  gets  worse  as  the 
company  size  gets  smaller.” 

“Until  now,  disaster  recov¬ 
ery  planning  was  mostly  seen 
as  an  IT  thing,”  said  Paris.  “So 
it’s  particularly  surprising  that 
so  many  CIOs  would  not  have 
a  plan  in  place.”  I 


FAA  Adopts  Wireless  Encryption  for  Security 


BY  DAN  VERTON 

Although  it’s  still  years  away 
from  replacing  its  current 
voice-based  air  traffic  control 
system  with  a  digital  data  link 
backbone,  the  Federal  Aviation 
Administration  last  week  ad¬ 
dressed  the  thorny  issue  of 
security  by  licensing  wireless 
encryption  technology. 

The  FAA  will  license  public- 
key  infrastructure  (PKI)  tech¬ 
nology  from  Hayward,  Calif.- 
based  Certicom  Corp.  The 
move  comes  as  the  FAA  enters 
the  implementation  phase  of 
its  Aeronautical  Telecommu¬ 
nications  Network  (ATN).  The 
ATN  is  a  next-generation  data 
link  network  being  developed 
by  the  International  Civil  Avi¬ 
ation  Organization  that  will 
eventually  be  used  by  air  traf¬ 
fic  controllers  to  send  com¬ 


mands  to  virtually  all  pilots. 

The  FAA  and  its  partner  in 
the  program,  Arlington,  Va.- 
based  ATN  Systems  Inc.,  a  pri¬ 
vately  held,  for-profit  corpora¬ 
tion  owned  by  11  U.S.  airlines, 
declined  to  comment  on  the 
security  requirements  of  the 
ATN.  But  experts  from  Certi¬ 
com  and  the  aerospace  indus¬ 
try  acknowledged  that  the  use 
of  encryption  will  be  para¬ 
mount  to  prevent  malicious 
hackers  or  terrorists  from  in¬ 
jecting  false  commands  into 
the  data  link  between  ground 
controllers  and  pilots. 

“Their  biggest  concern  is  au¬ 
thentication.  The  information 
is  only  of  value  if  it’s  real  time,” 
said  Prakash  Panjwani,  a  senior 
vice  president  at  Certicom.  He 
said  pilots  need  to  have  assur¬ 
ances  that  the  information  is 


coming  from  legitimate  air  traf¬ 
fic  controllers. 

Panjwani  said  the  FAA’s  se¬ 
lection  of  Certicom’s  products 
stemmed  from  its  need  for  the 
encryption  technology  to  work 
in  extremely  low  bandwidth 
conditions.  Currently,  con¬ 
trollers  are  dealing  with  a 
throughput  of  150  bit/sec.  at 
peak  times,  he  said. 

To  overcome  that  restric¬ 
tion,  the  ATN  will  rely  on  Cer¬ 
ticom’s  Elliptic  Curve  Cryp¬ 
tography,  a  standard  for  digital 
signature  algorithms  that  of¬ 
fers  more  efficient  use  of  band¬ 
width  than  other  PKI  algo¬ 
rithms,  Panjwani  said.  I 

For  more  security 
resources  online, 
visit  our  Security 
Knowledge  Center: 

www.computerworld.com/q?k1600 
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VeriSign  Targeted  by 
Angry  Site  Owners 

Customers  voice  a  bevy  of  complaints  over 
poor  customer  service,  domain  registration 


BY  JAIKUMAR  VIJAYAN 

NGRY  WEB  SITE 

owners  are  slam¬ 
ming  VeriSign  Inc. 
for  a  variety  of 
reasons  related  to 
the  company’s  domain  name 
registration  services. 

The  long  list  of  complaints 
—  many  of  which  are  chroni¬ 
cled  on  a  Web  site  created  to 
publicly  air  such  grievances  — 
includes  problems  with  domain 
name  renewals  and  transfers, 
misleading  marketing  tactics 
and  poor  customer  service. 

What  appears  to  be  provok¬ 
ing  much  of  the  immediate 
criticism  is  Verisign’s  alleged 
practice  of  sending  out  mis¬ 
leading  domain  renewal  no¬ 
tices  to  Web  site  owners  whose 


specific  issues  raised.  But  in  a 
general  response,  a  spokesman 
cited  the  sheer  size  of  Veri¬ 
sign’s  domain  services,  with 
13  million  VeriSign  registered 
domains  and  28  million  names 
in  its  global  registry. 

“No  one  company  domi¬ 
nates  this  business,  although 
we’re  proud  to  be  the  leader 
and  accept  the  responsibility 
that  comes  with  that,”  the 
spokesman  said.  But  with  more 
than  90  active  registrars  in  the 
business,  he  noted,  “we  active¬ 
ly  reach  out  to  potential  cus¬ 


tomers  to  make  them  aware  of 
our  services  and  value.” 

In  any  case,  the  complaints 
have  to  do  with  more  than  just 
misleading  marketing,  several 
Web  site  owners  said. 

Pulling  the  Plug 

Tracy  Bourgoine,  a  Web  de¬ 
veloper  at  SDE  Inc.,  a  Peter¬ 
borough,  N.H.-based  provider 
of  professional  development 
resources  for  educators,  is 
planning  on  yanking  her  orga¬ 
nization’s  one  remaining  do¬ 
main  registered  with  VeriSign 
when  it  comes  up  for  renewal. 

Her  frustration  stems  from 
what  she  claims  was  a  yearlong 
attempt  to  fully  renew  a  do¬ 
main  through  VeriSign.  Two 


What  I  can’t 
accept  is 
being  lied  to 
repeatedly,  in 
being  told 
that  it  would 
be  fixed. 

TRACY  BOURGOINE, 

WEB  DEVELOPER,  SDE  INC. 

months  after  apparently  com¬ 
pleting  and  paying  for  a  five- 
year  renewal  online,  Bour¬ 
goine  said,  VeriSign  shut  down 
the  domain  name  for  failure  to 
renew.  The  problem  stemmed 


Lawsuits  Highlight  PayPal's  Growing  Pains 


domain  names  aren’t  even  reg¬ 
istered  with  the  company. 

It’s  not  clear  that  these  no¬ 
tices  are  really  solicitations 
to  potential  customers  asking 
them  to  switch  from  their  cur¬ 
rent  registrars  to  VeriSign,  said 
Hugh  Brower,  president  of  Fu- 
turis  Networks  Inc.,  an  Inter¬ 
net  consulting  and  Web  ser¬ 
vices  firm  in  Hartford,  Conn. 

People  who  pay  VeriSign 
thinking  that  they’re  renewing 
their  existing  registrations  find 
themselves  switched  from  their 
registrars  to  VeriSign,  often 
without  realizing  what  they 
have  done,  Brower  said. 

“They  were  trying  to  make 
me  switch  to  a  more  expensive 
registration  service  without  my 
understanding  what  was  hap¬ 
pening,”  said  Arnold  Kling,  a 
Silver  l  ake,  Md.-based  owner 
of  a  noncommercial  Web  site. 

Mountain  View,  Calif.-based 
VeriSign  didn’t  respond  to  the 
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Users  say  company 
is  poorly  managing 
its  rapid  expansion 


BY  DEBORAH  RADCLIFF 

Two  class-action  suits  have 
been  Filed  against  PayPal  Inc.  in 
the  past  two  months,  accusing 
the  online  payment  processor 
of  having  inaccessible  customer 
service  and  a  trigger-happy 
antifraud  system  that  locks 
customers  out  of  their  own  ac¬ 
counts  with  little  recourse. 

The  lawsuits  highlight  cus¬ 
tomer  grievances  against  the 
fast-growing  company  that 
have  recently  shown  up  by  the 
thousands  in  postings  on  at 
least  Five  PayPal  complaint 
Web  sites. 

The  most  recent  suit,  filed  in 
San  Francisco  Federal  Court 
March  13,  alleges  that  Palo  Alto, 
Calif.-based  PayPal’s  two-tiered 
customer  service  practices  vi¬ 
olate  the  Electronic  Funds 
Transfer  Act,  which  requires 
companies  to  provide  a  phone 


number  for  customers  to  in¬ 
quire  about  their  transfers. 

Under  PayPal’s  terms-of-use 
agreements,  nonpaying  cus¬ 
tomers  are  required  to  seek 
help  through  the  PayPal  Web 
site  and  self-help  links. 

Those  users  make  up  about 
80%  of  PayPal’s  customer  base 
but  only  10%  of  the  transac¬ 
tions,  according  to  a  spokes¬ 


person  for  the  company. 

But  those  free  account  hold¬ 
ers  are  important  because 
they’re  needed  to  expand  Pay¬ 
Pal’s  buying  and  selling  net¬ 
work  of  small-scale  traders, 
said  Avivah  Litan,  research  di¬ 
rector  at  Gartner  Inc.  in  Stam¬ 
ford,  Conn. 

“Our  case  is  the  accessibility 
to  PayPal  to  its  own  customers 
who  try  to  alert  PayPal  that 
someone’s  withdrawing  mon¬ 
ey  out  of  their  checking  or 
credit  card  account.  But  the 
first  problem  they  have  is  they 
can’t  figure  out  how  to  contact 
PayPal  by  telephone  to  report 
it,”  said  Eric  Gibbs,  a  partner  at 
Girard  Gibbs  &  De  Bartolomeo 
LLC,  the  San  Francisco-based 
law  Firm  that  Filed  the  suit. 

The  case  also  addresses 
questions  regarding  whether 
accounts  are  being  properly 
frozen,  as  well  as  the  difficul¬ 
ties  people  have  getting  their 
money  out  of  the  frozen  ac¬ 
counts,  which  is  the  basis  for 
another  class-action  suit  Filed 
in  February  by  Oakland,  Calif.- 
based  Jacoby  &  Meyers  LLP  at 


from  a  credit  card  processing 
problem  at  VeriSign  and  re¬ 
sulted  in  a  two-day  outage. 

“I  can  accept  a  processing 
mistake  when  my  renewal  pay¬ 
ment  was  accepted  —  I  paid 
for  a  Five-year  renewal  and 
only  received  a  two-year  re¬ 
newal  —  but  what  I  can’t  ac¬ 
cept  is  being  lied  to  repeatedly, 
in  being  told  that  it  would  be 
fixed,”  Bourgoine  said. 

Ric  Carter,  president  of  Na- 
tionalForeclosures.com  in  San 
Diego,  said  he’s  still  upset  over 
his  unexplained  loss  two  years 
ago  of  a  domain  name  that  was 
registered  with  Verisign’s  Net¬ 
work  Solutions  Inc.  subsidiary. 
A  few  months  ago,  Carter  near¬ 
ly  lost  ownership  of  another 
domain  name  when  VeriSign 
acquired  a  company  with  which 
he  had  registered  domains. 

“It  was  a  nightmare,”  Carter 
said.  “If  the  same  thing  had 
happened  with  my  main  do¬ 
main  name,  I  would  have  been 
out  of  business.”  I 


Santa  Clara  County  Superior 
Court  in  San  Jose. 

The  Jacoby  &  Meyers  suit  al¬ 
leges  that  PayPal’s  “phenome¬ 
nal”  increase  in  users,  com¬ 
bined  with  its  lack  of  operating 
experience,  has  led  to  serious 
flaws  in  its  fraud  detection  and 
prevention  systems.  PayPal  now 
boasts  13  million  members,  up 
from  10,000  members  in  2000. 
The  company  currently  per¬ 
forms  $200  million  in  transac¬ 
tions  per  day. 

PayPal  hasn’t  yet  responded 
to  either  of  the  cases,  but  com¬ 
pany  spokesman  Vince  Solito 
said  the  lawsuits  are  without 
merit.  Solito  said  that  the  com¬ 
pany  has  hired  200  additional 
customer  service  representa¬ 
tives  for  its  processing  center 
in  Omaha.  He  also  pointed 
to  PayPal’s  e-mail  notiFication 
process  and  no-risk  guarantee 
for  transactions  between  Pay¬ 
Pal  members  with  addresses 
verified  by  the  company.  I 
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Gartner  Hits  Oracle 
On  Database  Tactics 

Stamford,  Conn.-based  Gartner  Inc. 
became  the  second  consulting  firm 
in  the  past  two  weeks  to  issue  a 
report  criticizing  Oracle  Corp.  over 
database  licensing  issues.  Gartner 
claimed  that  Oracle’s  sales  force 
“has  inappropriately  imposed  extra 
licensing  fees”  on  some  users 
through  actions  such  as  selling 
companies  more  licenses  than  they 
need.  Oracle  said  it  “does  not  con¬ 
done  or  encourage”  such  behavior. 


SAP  Extends  Support 
On  R/3  Applications 

SAP  AG  announced  plans  to  extend 
technical  support  on  some  releases 
of  its  R/3  business  applications.  The 
planned  end  of  support  for  R/3  4.6C 
was  pushed  back  by  12  months 
from  the  previous  cutoff  date  of 
March  2005.  SAP  said  several  pre¬ 
vious  releases  will  be  supported  un¬ 
til  the  end  of  next  year,  after  which 
users  will  have  to  pay  an  extra  fee 
to  get  continued  maintenance. 


White  House  Seeks 
Web  Site  Reviews 

The  White  House  is  ordering  all  fed¬ 
eral  agencies  to  review  their  Web 
sites  in  an  attempt  to  root  out  “sen¬ 
sitive  but  not  classified”  information 
that  could  be  used  to  threaten  pub¬ 
lic  safety.  Agencies  have  until  June 
19  to  report  their  findings  to  the 
U.S.  Office  of  Homeland  Security, 
the  White  House  said. 

aw  *  ■  rattr  tmmmmmmmmmmmmmmmmmmm 

Red  Hat  Targets 
Corporate  Linux  Users 

tied  Hat  Inc.  announced  what  it 
described  as  its  first  Linux  operat¬ 
es  system  release  aimed  entirely  at 
■  a  ;  -j  a  -,te  applications.  The  Raleigh, 
h  a  id  company  said  its  Linux 
Saiver  software  supports 
processor  systems  and 
■  “Mi  tt-ip  clustering  and 
*  ■.hty  management  tools. 


Latest  z/OS  Release 
Focuses  on  Security 

IBM’s  mainframe  operating  system  adds  support 
for  digital  certificates,  new  encryption  standards 


BY  JAIKUMAR  VIJAYAN 

bm  has  made  security  a 
core  theme  in  the  latest 
version  of  its  z/OS  main¬ 
frame  operating  system, 
which  was  announced 
last  week. 

With  the  release  of  z/OS  1.3, 
users  of  IBM’s  64-bit  zSeries 
mainframes  now  have  the  abil¬ 
ity  to  issue  and  manage  hun¬ 
dreds  of  thousands  of  digital 
certificates  for  authenticating 
user  identities,  according  to 
the  company. 

The  operating  system  also 
supports  the  new  Advanced 


Agreement  designed 
to  support  Invensys’ 
reorganization  plan 

BY  JAIKUMAR  VIJAYAN 

Invensys  PLC  in  London  has 
outsourced  IT  operations  in 
more  than  a  dozen  countries  to 
IBM  Global  Services  in  a  trans¬ 
action  valued  at  $1  billion  over 
the  next  10  years. 

IBM  will  provide  infrastruc¬ 
ture  server  management,  appli¬ 
cation  maintenance,  help  desk, 
Web  hosting  and  desktop  sup¬ 
port  services  for  more  than 
29,000  desktops  and  more  than 
2,000  large  servers  in  about  400 
Invensys  locations  worldwide. 

“The  aim  is  to  standardize 
processes,  introduce  rigor 
around  Invensys  services  and 
improve  them,  and  to  become 
more  cost-effective,”  an  Inven¬ 
sys  spokesman  said  in  an 
e-mail  to  Computerworld. 

Invensys  will  retain  a  “small 
internal  IT  organization”  to 
manage  its  relationship  with 
IBM  and  to  authorize  and  ap- 


Encryption  Standard  that  re¬ 
placed  the  Data  Encryption 
Standard  as  the  high-level 
standard  for  encrypting  data. 

Also  supported  on  z/OS  1.3 
is  the  Derived  Unique  Key  Per 
Transaction  standard,  an  en¬ 
cryption  technique  that’s  used 
with  point-of-sale  terminals. 

Such  enhancements  are  key 
to  meeting  the  security  require¬ 
ments  of  large  financial  institu¬ 
tions  and  other  organizations 
that  use  the  power  and  scalabil¬ 
ity  of  IBM  mainframes  to  host 
critical  applications,  said  Linda 
Distel,  director  of  IBM’s  eServ- 


prove  any  changes  to  the  scope 
of  the  contract,  the  spokesman 
added. 

The  outsourcing  arrange¬ 
ment  is  being  driven  by  Inven¬ 
sys’  efforts  to  improve  IT  effi¬ 
ciencies  as  part  of  a  wide-rang¬ 
ing  reorganization  announced 
in  February,  said  Harry  Spell¬ 
man,  an  IBM  client  executive. 

Invensys  is  shifting  enter¬ 
prise  resource  planning  ven¬ 
dor  Baan  Co.,  which  it  owns, 
to  a  new  division  focused  on 
production  management  tech¬ 
nologies  in  industries  such  as 
oil  and  food  manufacturing. 


Invensys/IBM  Deal 

■  The  contract  is  valued  at  $1  billion 
over  the  next  10  years 

■  IBM  will  provide  hardware  infra¬ 
structure  and  application  manage¬ 
ment  services  for  29,000  desktops 
and  2,000  large  servers  in  about 
400  Invensys  locations  worldwide. 

■  About  600  operational  IT 
staffers  will  transfer  to  IBM  under 
the  arrangement. 


er’s  security  program. 

“The  security  needs  of  our 
customers  have  been  greatly 
increasing  because  of  e-busi¬ 
ness  and  the  Internet,”  Distel 
said. 

Scalability  and  Security 

For  instance,  Danske  Bank  in 
Copenhagen  is  currently  using 
IBM-branded  Windows  NT 
servers  to  issue  digital  certifi¬ 
cates  to  nearly  1  million  of  its 
business  and  personal  cus¬ 
tomers.  The  bank  plans  to 
move  this  function  to  IBM’s 
zSeries  mainframes  because  of 
the  greater  scalability  and  se¬ 
curity  offered  by  the  technolo¬ 
gy,  said  Claus  Jensen,  a  vice 
president  and  head  of  systems 
architecture  at  Danske  Bank. 


As  part  of  the  reorganization, 
Invensys  last  week  also  sold  off 
a  part  of  its  energy  manage¬ 
ment  business  and  its  flow  con¬ 
trol  unit,  which  manufactures 
products  such  as  valves. 

Outsourcing  to  IBM  in  the 
midst  of  such  sweeping 
changes  should  help  Invensys 
keep  its  IT  operations  stable, 
said  Bruce  Caldwell,  an  analyst 
at  Stamford,  Conn.-based  Gart¬ 
ner  Inc.  “It  makes  it  easier  for 
them  to  move  to  a  more  utility¬ 
like  approach  to  computing 
services,”  he  said. 

IBM’s  experience  in  helping 
large  corporations  deal  with 
IT-related  issues  during  merg¬ 
ers  and  acquisitions  is  proba¬ 
bly  what  landed  it  the  contract 
over  Plano,  Texas-based  Elec¬ 
tronic  Data  Systems  Corp., 
which  was  also  competing  for 
it,  Caldwell  said. 

The  transition  to  IBM  man¬ 
aged  services  will  begin  imme¬ 
diately,  Spellman  said.  About 
600  IT  employees  from  Inven¬ 
sys  will  be  transferred  to  IBM 
starting  next  month  in  the  U.S 
and  in  June  elsewhere. ) 


AT  A  GLANCE 


Security  Plus 

New  features  in  z/OS 
Release  3  include: 

■  Public-key  infrastructure  support 

■  Support  for  new  encryption  and  crypto¬ 
graphic  standards 

■  Storage  management  enhancements 

■  Enhancements  to  Unix  systems  services 

■  Improvements  to  workload  management 
capabilities 


Native  support  for  digital 
certificate  technology  on  the 
z/OS  means  the  bank  has  bet¬ 
ter  control  and  autonomy 
when  it  comes  to  managing, 
adding,  revising  and  removing 
certificates  for  customers,  said 
Jensen.  So  far,  the  bank  has 
used  digital  certificates  only 
within  its  own  network. 

Danske  Bank  also  plans  to 
extend  the  network  to  external 
partners.  As  a  result,  “we  are 
looking  forward  to  having 
standardized  and  scalable  digi¬ 
tal  certificate  support  integrat¬ 
ed  into  the  z/OS,”  Jensen  said. 

The  new  version  of  z/OS 
builds  on  the  strong  security 
features  —  such  as  the  Re¬ 
source  Access  Control  Facility 
and  Kerberos  network  authen¬ 
tication  capabilities  —  that 
have  long  characterized  IBM’s 
mainframe  hardware  and  soft¬ 
ware,  said  Bob  Simko,  presi¬ 
dent  of  International  Technol¬ 
ogy  Group  in  Los  Altos,  Calif. 

“In  that  sense,  this  is  an  evo¬ 
lutionary  release,”  he  said. 

Growing  Demand 

IBM  is  also  responding  to 
what  it  thinks  will  be  a  growing 
demand  for  more  secure  plat¬ 
forms  as  companies  push  into 
collaborative  commerce  and 
other  Internet-based  applica¬ 
tions,  said  John  Phelps,  an  ana¬ 
lyst  at  Stamford,  Conn.-based 
Gartner  Inc. 

“If  you  are  going  to  use  the 
[zSeries]  as  an  e-commerce 
platform,  these  are  the  sort  of 
things  IBM  believes  are  defi¬ 
nitely  going  to  be  needed,” 
Phelps  said.  I 

For  more  information 
V7LUL.lv  on  this  topic,  visit  our 
T  Operating  System 

I  U  llv^i^  Knowledge  Center: 

www.computerworld.com/q7k1500 


Invensys  Outsources  IT  to  IBM  in  $1B  Deal 
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3G  Wireless  Wotks! 


Faster  deployment 

Your  choice  of  wireless  carrier  matters!  CDMA 
carriers  are  the  first  to  market  with  fully  standard¬ 
ized,  commercial  3G  networks  and  devices — 
long  before  other  wireless  carriers.  By  choosing 
a  CDMA  carrier,  you  can  leverage  the  real  and 
practical  advantages  of  3G  CDMA  today,  and 
avoid  the  pitfalls  of  a  costly  and  complex  wireless 
network  and  device  migration  path. 

Faster  network  throughput 

Today’s  3G  CDMA  networks  provide  peak  rates 
up  to  144  kbps.  But  more  importantly,  they 
provide  real  throughputs  of  up  to  60-90  kbps, 
enabling  many  applications  that  were  never  before 
practical  over  a  wireless  wide  area  network  (WAN). 

More  device  choices 

With  our  industry-leading  chipset  and  software 
solutions,  QUALCOMM  is  enabling  the  rapid 
development  of  3G  devices  by  dozens  of  leading 
manufacturers  worldwide.  This  includes  PCMCIA 
cards  with  WAN  access  at  up  to  60-90  kbps  for 
enterprise  data  applications  such  as  e-mail,  cus¬ 
tomer  relationship  management  and  sales  force 
automation.  Phones  and  PDAs  with  low-latency 
browsing,  color  displays,  and  increased  capabili¬ 
ties  for  position  location  and  enhanced  wireless 
multimedia  are  also  commercially  available. 

(See  www.3Gtoday.com  for  more  details.) 

Faster  development 

QUALCOMM  has  created  an  open  applications 
platform  called  the  Binary  Runtime  Environment 
for  Wireless'"  (BREW")  that  supports  native  C/C++ 
and  Java"  applications,  enabling  developers  to 
extend  enterprise  applications  quickly  and  easily. 
BREW  also  lets  you  download  and  update  applica¬ 
tions  directly  to  the  user’s  device  for  better  software 
management  and  control. 

Faster  decisions 

Our  mobility  experts  at  Wireless  Knowledge  deliver 
strategic  mobility  solutions  that  leverage  existing 
investments  while  harnessing  the  technical  and 
competitive  advantages  provided  by  today’s  3G 
wireless  technologies.  By  extending  critical  corpo¬ 
rate  applications  to  mobile  devices,  business 
professionals  are  empowered  to  make  informed, 
financially  justified  decisions  to  drive  their  business. 

Faster  ROI 

From  improved  productivity  and  responsiveness 
to  better  logistics  and  customer  relationship 
management,  the  benefits  of  corporate  data 
mobility  are  more  compelling  now  than  ever.  Visit 

www.qualcomm.com/enterprise  to  learn  more. 
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New  Network  at  Core 
Of  Casino  Expansion 


Mohegan  Sun  bets  on  CRM  apps  and 
monitoring  tools  to  police  slot  machines 


BY  MICHAEL  MEEHAN 

s  the  Mohegan 
Sun  Casino  read¬ 
ies  itself  for  the 
final  test  of  a  new 
$60  million  IT  in¬ 
frastructure  that  it  installed  in 
stages  during  the  past  18 
months,  the  gaming  resort  isn’t 
in  a  gambling  mood. 

Central  to  the  infrastructure 
upgrade  is  a  $4  million  net¬ 
work  that’s  aimed  at  more 
closely  monitoring  the  casino’s 
slot  machines  and  a  new  cus¬ 
tomer  relationship  manage¬ 
ment  (CRM)  system,  said  Jake 
Star,  director  of  technology 
services  at  the  Uncasville, 
Conn. -based  company. 

With  a  new  1,200-room  hotel 
and  convention  center  due  to 
open  later  this  month,  Star  said 
he  expects  the  26MB  of  daily 
statistical  data  that  currently 
wends  its  way  through  the  net¬ 
work  to  double  in  size. 

“After  the  slot  machines,  the 
monitoring  system  is  probably 
the  most  important  thing 
we’ve  got  in  here,”  he  said. 

Star  emphasized  that  every 
facet  of  the  5  million-square- 
foot  entertainment  complex, 
which  includes  a  10,000-seat 
arena,  a  shopping  mall  and  the 
soon-to-be-added  facilities,  re¬ 
lies  on  the  seamless  perfor¬ 
mance  of  Mohegan  Sun’s  net¬ 
work.  He  added  that  the  stakes 
are  too  high  for  the  IT  staff  to 
trust  that  the  casino’s  network 
and  applications  will  perform 
as  advertised,  creating  the 
need  to  monitor  everything. 

Without  it,  we’re  doing  this 
1  Iiitd,”  Star  said. 

the  start  of  the  project  in 
’000,  Star  tapped 
developed  by  West- 
s.-based  NetScout 
!  c.  to  monitor  and 
the  network  and  ap- 
performance. 


Prior  to  the  upgrade,  Star  had 
to  contend  with  a  network  out¬ 
age  of  at  least  one  hour  every 
two  weeks.  Since  then,  the  casi¬ 
no  hasn’t  suffered  any  core  out¬ 
ages,  and  only  one  server 
switch  has  been  down  for  a  to¬ 
tal  of  45  seconds,  he  said. 

“If  you  can’t  talk  to  our 
AS/400s,  you’re  talking,  just  in 
net  profits,  about  losing  $1  mil¬ 
lion  a  day,”  Star  said.  “We  have 
to  ensure  uptime  and  fix  things 
quickly  if  there’s  an  outage.” 

The  networked  slot  machines 
are  the  real  cash  cow,  since 
they’re  able  to  constantly  feed 
the  CRM  system  with  informa¬ 
tion  about  things  such  as  when  a 


Continued  from  page  1 

J.D.  Edwards 

&  Samuelian.  Spectratek 
stopped  work  on  the  project  in 
early  2000  and  has  had  to  con¬ 
tinue  using  its  legacy  procure¬ 
ment  and  accounting  systems, 
he  said. 

As  part  of  its  suit,  the  com¬ 
pany  is  seeking  to  recover 
more  than  $660,000  that  it  paid 
in  licensing  and  service  fees  to 
Denver-based  J.D.  Edwards 
and  Business  Systems  Special¬ 
ties  Inc.,  a  systems  integrator 
in  Newport  Beach,  Calif. 

Another  user  that  sued  J.D. 
Edwards,  Park  Hill,  Okla.- 
based  Greenleaf  Nursery  Co., 
last  week  said  it  turned  off 
most  of  a  One  World-based  en¬ 
terprise  resource  planning  sys¬ 
tem  in  December  and  replaced 
it  with  a  combination  of  home¬ 
grown  code  and  applications 
developed  by  Microsoft  Corp.’s 
Great  Plains  Business  Solu¬ 
tions  division. 

Greenleaf’s  One  World  appli¬ 
cations  went  live  in  late  1999, 


gambler  began  using  a  machine 
and  how  much  money  he  spent. 

The  slots  have  been  clus¬ 
tered  and  put  on  a  serial  con¬ 
nection  back  to  the  network. 
NetScout’s  tools,  which  cost 
$500,000,  monitor  application 
performance  as  transactions 
pass  through  those  connectors. 

“On  a  Saturday  night,  we’ve 
got  10  transactions  a  second 
coming  from  those  slot  ma¬ 
chines,”  Star  said. 

Mohegan  Sun  isn’t  the  only 
organization  looking  at  beefed- 
up  network-monitoring  capa¬ 
bilities  as  a  key  component  of 
an  IT  overhaul. 

For  instance,  Motorola  Inc. 
in  Schaumburg,  Ill.,  plans  to 
remap  all  of  its  customer-fac¬ 
ing  business  processes  during 
the  next  few  years,  according 
to  Chief  Technology  Officer 


but  company  attorney  Reece 
Morrel  Jr.  said  the  software 
didn’t  properly  handle  func¬ 
tions  such  as  invoicing  and 
inventory  management.  That 
forced  Greenleaf  to  rely  on 
manual  processes  and  resulted 
in  lost  sales,  spoiled  inventory 
and  an  inability  to  collect  ac¬ 
counts  receivable,  according  to 
the  company’s  lawsuit. 

In  the  suit,  which  was  filed 
last  July,  Greenleaf  alleges 
breach  of  contract  and  seeks 


The  system 
wasn’t  ready 
yet  when 
[Spectratek] 
bought  it. 

WILLIAM  McTAGGART,  ATTORNEY, 
PARKER,  MILLIKEN,  CLARK, 
O'HARA  &  SAMUELIAN 


Toby  Redshaw.  As  the  compa¬ 
ny’s  network  grows  and  the 
applications  become  more  in¬ 
terdependent,  Redshaw  said, 
he  wants  to  make  sure  that 
Motorola  IT  managers  have 
complete  visibility  into  every 
facet  of  its  network. 

This  becomes  especially  im¬ 
portant  because  “you  can  now 
integrate  your  systems  so  that 
one  request  can  touch  off 
hundreds  of  other  requests 
from  different  systems,”  said 
Wayne  Aiello,  vice  president  of 
e-business  services  at  office 
supplier  Corporate  Express 
Inc.  in  Broomfield,  Colo. 

Star  said  he’s  seeing  the  ben¬ 
efits  of  that  real-time  visibility 
today,  especially  on  the  appli¬ 
cation  performance  side. 

He  noted  that  the  typical 
reaction  of  application  ven¬ 
dors  when  problems  occur  is 
to  blame  the  network. 

“Now  that  we  can  track  the 
application  performance,  the 
monitor  essentially  becomes 
the  arbitrator,”  Star  said.  “We 
can  show  the  vendor  what’s 
working  and  what  isn’t.”  I 


Playing  a  Big  Hand 

As  part  of  its  IT  overhaul, 
Mohegan  Sun  also  installed 
the  following  technologies: 

■  Five  IBM  AS/400  systems  to 
replace  the  13  IBM  RS/6000  Unix 
servers  that  formerly  ran  its  back- 
office  operations 

■  Two  T3  trunk  lines  to  replace  its 
existing  T1  connections 

■  A  Cisco  Catalyst  6509  core, 
distribution  and  server  switching 
network  plugged  into  1,100  Cisco 
Catalyst  4006  closet  switches 

■  Gigabit  Ethernet  to  every  serv¬ 
er,  with  a  minimum  connection  of 
100M  bit/sec.  to  every  desktop, 

2G  bit/sec.  to  each  wiring  closet 
and  8G  bit/sec.  to  8G  bit/sec.  to 
each  core  switch  system 

■  Separate  virtual  LANs  that  iso¬ 
late  a  new  hotel  and  convention 
center  to  protect  core  systems 

■  6,150  networked  slot  machines 
feeding  into  an  integrated  slot  ma¬ 
chine/CRM  system  running  on  the 
AS/400s 


$40  million  in  project  costs, 
damages  and  legal  fees.  The 
case  is  expected  to  go  to  arbi¬ 
tration  this  year,  Morrel  said. 

One  World  was  J.D.  Edwards’ 
first  product  that  ran  on  Win¬ 
dows  and  Unix  servers  in  addi¬ 
tion  to  IBM  AS/400s.  Other 
early  adopters  that  have  taken 
action  against  J.D.  Edwards  in¬ 
clude  Evans  Industries  Inc.,  a 
container  maker  in  Harvey,  La.; 
Supercom  Inc.,  a  Fremont, 
Calif.-based  computer  parts 
distributor;  and  Doskocil  Man¬ 
ufacturing  Co.,  an  Arlington, 
Texas-based  maker  of  pet  prod¬ 
ucts  and  sporting  goods. 

Evans  filed  a  suit  in  late 
2000;  J.D.  Edwards  said  it  has 
since  been  dismissed,  but  an 
official  at  Evans  disputed  that 
claim.  Doskocil  requested  ar¬ 
bitration  proceedings  last  No¬ 
vember,  while  Supercom  did 
the  same  in  June  2000. 

A  J.D.  Edwards  spokesman 
said  the  software  vendor  be¬ 
lieves  it  did  nothing  wrong  and 
will  vigorously  defend  that  po¬ 
sition.  “The  [OneWorld]  solu¬ 
tions  did  not  meet  the  expecta¬ 
tions  of  these  particular  cus¬ 


tomers  for  a  wide  range  of  rea¬ 
sons,  and  we  do  not  believe  it 
was  because  of  the  quality  of 
J.D.  Edwards’  software,”  he  said. 

A  spokesman  at  Business 
Systems  Specialties  declined 
to  comment  in  detail  on  Spec- 
tratek’s  suit.  “Our  involvement 
in  the  case  is  only  because  of 
alleged  problems  with  the  J.D. 
Edwards  OneWorld  product,” 
he  said.  “Everything  we  did 
was  appropriate.” 

Jim  Shepherd,  an  analyst  at 
AMR  Research  Inc.  in  Boston, 
said  it’s  not  surprising  that 
OneWorld  had  some  start-up 
problems  because  of  the  new 
technologies  that  were  built 
into  the  software,  such  as  its 
graphical  user  interface  and 
distributed  object  architec¬ 
ture.  But  J.D.  Edwards  ac¬ 
knowledged  the  problems  and 
fixed  them,  Shepherd  said.  He 
added  that  he  considers  One- 
World  to  now  be  “very  stable 
and  high  quality”  software.  ► 
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To  read  more  about 
J.D.  Edwards'  arbi¬ 
tration  proceedings, 
visit  our  Web  site: 


www.computerworld.com/q?28521 
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CONSTRUCTIVE 

DISRUPTION 

CTO:  AGENT  for  CHANGE 


The  challenges  of  the  CTO  are  unlike  anyone  else's.  You’re  the  one  that  everyone  comes  to 
for  answers,  solutions,  predictions  and  miracles.  As  the  miracle  worker  of  your  enterprise, 
it  is  your  job  to  decipher  what  works  and  what  doesn't. 

Now  in  its  3rd  year,  this  invitation-only  conference  brings  together  an  exclusive  crowd  of 
people,  like  you,  who  are  driving  the  use  of  disruptive  technologies  to  transform  business 
processes  and  define  the  next  wave  of  innovation. 

Join  200  other  CTOs  for  2V2  days  of  networking,  keynotes,  panels,  practical  discussions,  and 
working  sessions.  Share  ideas  and  swap  stories  about  the  day-to-day  challenges  that  CTOs 
face  at  the  only  event  created  by  CTOs  for  CTOs. 


WHO  SHOULD  ATTEND? 

CTO  Forum  is  an  invitation-only  conference  for  CTOs  and  high-level  technology  executives. 
If  you  do  not  have  a  CTO  title,  but  are  making  high-level  technology  decisions,  you  may  still 
be  entitled  to  attend. 

FEATURED  SESSIONS 

■  The  Role  of  the  CTO  in 
Today’s  Economy 

■  Disruptive  Technologies:  From 
Annoyance  to  Reliance 

■  Extreme  Programming 

*  Grid  Computing 

*  Wireless  Infrastructure  Issues 

■  A  Look  Inside  the  Labs 

SPECIAL  EVENTS 

■  Monday,  April  8,  2002  Pac  Bell  Park  Technology  Tour 

Be  our  guest  for  a  behind-the-scenes  technology  tour  of  Pac  Bell  Park,  home  of  the  San  Francisco 
Giants.  The  tour  will  be  conducted  by  the  SF  Giants  CIO  and  a  senior  IS  department  staff  member. 

■  Wednesday,  April  10,  2002  SF  Giants  vs.  LA  Dodgers  Baseball  Game 

Be  our  guest  as  the  San  Francisco  Giants  take  on  the  LA  Dodgers  at  Pac  Bell  Park  in  San  Francisco. 

*  Attendance  to  these  events  is  available  on  a  first-come  first-served  basis.  Space  is  limited. 


■  Software  as  a  Service 

■  Disaster  Recovery  Best  Practices 

■  Marriage  of  Business  and  Technology: 
Critical  Skills  for  CTOs 

■  Business  Continuity  Best  Practices 

*  IT  Project  Management  and  Priority- 
Setting  in  Today’s  Economy 

■  Next  Generation  Systems  Management 
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Request  your  invitation  now!  Go  to  http://ctoforum.infoworld.c  jm/RF19 
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Microsoft  and  NetlQ  make  it  easier  to  manage  your  entire  Windows 
environment.  You’ve  got  servers  running  Windows®  2000  here, 
servers  running  Windows  NT®  in  the  next  building,  and  a  mix  of  platforms 
running  in  your  plants  overseas.  Managing  a  global-class  enterprise  sure 

means  a  iot  of  running. 

Which  is  why  Microsoft  and  NetlQ  teamed  up  to  deliver  a  way  to  manage 


your  entire  Windows  Server  environment  from  one  very  convenient  place:  your 
desk.  It  starts  with  Microsoft®  Operations  Manager  2000,  the  most  effective 
way  to  manage  all  your  Windows  2000-based  servers  and  applications,  from 
proactive  alerting  to  performance  monitoring  to  event  collection  and  reporting 
By  adding  NetlQ  Extended  Management  Pack  modules,  you  can  also 
monitor  Windows  NT  4.0  as  well  as  other  Microsoft  servers;  mission-critical 


NeiiQ  Corporation  All  rights  reserved.  Microsoft.  Windows,  and  Windows  NT  are  either  registered  trademarks  or  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  respective  owners. 
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applications  like  Oracle  RDBMS  and  Lotus  Domino;  and  large-scale  enterprise 
platforms  like  UNIX  and  NetWare.  All  from  one  centralized  console. 

Which  means  that  you  spend  a  lot  less  time  running  around  your 
enterprise,  and  a  lot  more  time  simply  and  effectively  managing  it.  Get  a 
head  start  on  reducing  your  management  burden  with  a  visit  to  netiq.com 
/manageability  today.  Software  for  the  Agile  Business. 
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NEWSINDUSTRY 


Sun,  HP  Look  to  Boost 
Low-end  Unix  Servers 


Rival  sub-$l,000  systems  aimed  at  Web 

applications,  branch  office  processing 


Microsoft  Corp.  filed  amended  fi¬ 
nancial  statements  for  the  first  half 
of  its  current  fiscal  year,  saying  it 
had  understated  the  amount  of  un¬ 
earned  revenue  on  its  books  by  al¬ 
most  SI  billion.  Unearned  revenue  is 
a  balance-sheet  liability  used  to  ac¬ 
count  for  money  received  in  return 
for  products  and  services  that  have 
yet  to  be  delivered.  Microsoft  attrib¬ 
uted  the  mistake  to  a  clerical  error. 

Optical  Vendor  Ciena 
Makes  More  Job  Cuts 

Linthicum,  Md.-based  optical  net¬ 
working  vendor  Ciena  Corp.  an¬ 
nounced  its  third  round  of  cutbacks 
since  November,  saying  that  it  laid 
off  650  employees  because  of  con¬ 
tinued  weak  demand  for  its 
telecommunications  equipment.  The 
new  layoffs  lowered  Ciena’s  work¬ 
force  by  22%  and  followed  a  S70.6 
million  loss  in  the  company’s  first 
quarter  ended  Jan.  31. 

Covad  Reaps  Profit 
From  Debt  Write-offs 

Covad  Communications  Group  Inc., 
which  emerged  from  bankruptcy 
protection  in  December,  reported  a 
net  profit  of  $858.5  million  for  last 
year’s  fourth  quarter  due  to  a  $1  bil¬ 
lion  gain  related  to  debt  write-offs. 
The  Santa  Clara,  Calif.-based  Digi¬ 
tal  Subscriber  Line  service  provider 
said  it  lost  $112.3  million  from  oper¬ 
ations  during  the  quarter  on  rev¬ 
enue  of  $89.5  million. 


Short  Takes 

Uf.Wl  LTT-PACKARD  CO.  completed 
a  planned  acquisition  of  INDIGO  NV, 
a  Maastricht,  Netherlands-based 
aker  of  digital  color  printing 
resses  for  commercial  and  indus- 

rria)  users _ Mountain  Lakes, 

' i  J. -based  COMPUTER  HORIZONS 
spun  off  its  Princeton,  N.  J.- 
tNCETON  SOFTECH  INC. 

■  "  i  sr<  ving  subsidiary. 


BY  TODD  R.  WEISS 

UN  MICROSYSTEMS 
Inc.  and  Hewlett- 
Packard  Co.  are  tak¬ 
ing  their  battle  for 
Unix  server  sales  to  a 
new  low,  in  the  form  of  entry- 
level  systems  that  start  at  less 
than  $1,000  and  are  aimed  at 
uses  such  as  running  Web  sites 
and  e-mail  systems. 

Sun  last  month  unveiled  an 
upgraded  version  of  its  sub- 
$1,000  server,  adding  a  CD- 
ROM  drive  and  the  enterprise 
edition  of  its  iPlanet  Web  Serv¬ 
er  software.  The  single-proces¬ 
sor  server  has  a  base  price  of 
$995,  the  same  as  the  original 
model  that  Sun  shipped  early 
last  year. 

The  move  by  Sun  followed 
HP’s  introduction  earlier  in 
March  of  a  low-end  Unix  serv¬ 
er  that  also  starts  at  $995.  HP 
said  the  system  is  priced  as 
much  as  58%  lower  than  its 
previous  entry-level  boxes. 

There  are  some  notable  dif¬ 
ferences  between  the  rival 
rack-mounted  systems.  Sun’s 
server,  formerly  called  the  Net- 
ra  XI  and  now  renamed  the 
Sun  Fire  V100,  comes  standard 
with  a  40GB  disk  drive  in  addi¬ 
tion  to  the  CD-ROM  drive.  Sun 
officials  said  the  base  system  is 
ready  to  install  and  use  as  is. 

HP’s  rp2430  doesn’t  include 
a  disk  drive  as  a  standard  fea¬ 
ture,  and  the  company  said  it 
expects  typical  configurations 
to  cost  about  $3,500.  But  a 
dual-processor  model  of  the 
server  offers  greater  expansion 
capabilities  than  Sun  does. 

New  Opportunities 

The  low-end  systems  give 
HP  and  Sun  a  chance  to  tap 
into  a  part  of  the  server  busi¬ 
ness  that  has  relatively  high 
volumes,  said  Jean  Bozman,  an 
analyst  at  IDC  in  Framingham, 
Mass.  “I’m  not  saying  it’s  a 


mass  market,”  Bozman  said. 
But  especially  for  Sun,  she 
added,  the  low  prices  are  de¬ 
signed  to  help  it  compete 
against  Windows  systems  built 
around  Intel  Corp.  chips. 

Laura  Finkelstein,  group 
manager  for  Sun’s  entry-level 
servers,  said  the  Sun  Fire  V100 
is  aimed  primarily  at  small  and 
medium-size  companies  that 
want  to  use  a  Unix  server  to 
manage  e-mail,  proxy  caching, 
directory  services  and  other 
Web  infrastructure  needs. 


But  investigation 
shouldn't  hamper 
turnaround  effort 


BY  JAIKUMAR  VIJAYAN 

Network  Associates  Inc., 
which  is  trying  to  rebound 
from  a  series  of  losses,  last 
week  disclosed  that  the  Securi¬ 
ties  and  Exchange  Commission 
(SEC)  has  launched  an  investi¬ 
gation  into  the  accounting  pro¬ 
cedures  used  by  the  security 
software  vendor  during  2000. 

Security  analysts  said  they 
don’t  expect  the  SEC  probe  to 
derail  Network  Associates’ 
comeback  efforts.  “The  cur¬ 
rent  management  team  has 
spent  the  last  15  months  or  so 
putting  a  lot  of  their  problems 
behind  them,”  said  Eric  Hem- 
mindinger,  an  analyst  at  Ab¬ 
erdeen  Group  Inc.  in  Boston. 

But  the  investigation  did 
prompt  the  Santa  Clara,  Calif.- 
based  company  to  postpone  a 
bid  to  buy  full  ownership  of 


Companies  that  need  an  ap¬ 
plication  server  for  distributed 
business  units  and  branch  of¬ 
fices  are  another  target  market 
for  the  low-end  Unix  ma¬ 
chines,  said  Kate  O’Neill,  a 
product  manager  at  HP. 

Radianz  Inc.,  a  New  York- 
based  extranet  and  Web  host¬ 
ing  provider,  uses  about  100 
Sun  Netra  XI  servers  to  trans¬ 
mit  real-time  stock  and  bond 
prices  to  financial  services 
firms  over  a  global  network. 

Ken  Chin,  director  of  mid¬ 
dleware  services  at  Radianz, 
said  he  plans  to  begin  adding 
Sun  Fire  V100  boxes  to  the  net¬ 
work  in  the  near  future. 

Radianz  chose  the  Sun 


antivirus  software  developer 
McAfee.com  Corp.  Network 
Associates  holds  a  75%  stake  in 
McAfee.com  and  planned  last 
week  to  file  a  formal  offer  to 
buy  the  remaining  publicly 
held  shares  of  the  Sunnyvale, 
Calif.-based  company. 

But  Network  Associates  said 
it’s  delaying  the  offer  until  “a 
later  date”  because  of  the  SEC 
investigation.  Meanwhile,  Mc- 
Afee.com  rejected  the  bid,  say¬ 
ing  the  stock-swap  deal  would 


Internal  Changes 

Network  Associates  made  the 
following  moves  as  part  of  its 
ongoing  reorganization: 

PUT  its  PGP  encryption  software 
into  maintenance  mode  after  failing 
to  find  a  buyer  for  the  software. 

SOLD  off  its  Gauntlet  firewall  and 
virtual  private  network  technology  to 
Secure  Computing  Corp. 

LAID  OFF  250  employees  who  did 
work  related  to  the  PGP  and  Gaunt¬ 
let  product  lines. 


Network  Associates  Faces 
SEC  Accounting  Probe 


Microsoft  Fixes  $1B 
Financial  Miscue 
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Server  Dealings 

The  new  servers  include  the 
following  technology: 

Sun  Fire  V100 

CPU:  500-MHz 
UltraSPARC  He 

Memory:  128MB  to  512MB 

Disk  storage:  40GB  to  80GB 


HP  rp2430 

CPU:  650-MHz  PA-8700 
Memory:  128MB  to  2GB 
Dispitorage:  Up  to  146GB 


servers  over  Windows-based 
systems  because  most  of  its 
customers  use  Unix  hardware 
themselves.  “Wall  Street  has 
primarily  standardized  on 
Unix  as  being  more  stable  and 
manageable,”  Chin  said.  I 


be  “financially  inadequate.” 

Network  Associates  CEO 
George  Samenuk  said  during  a 
teleconference  that  the  SEC’s 
investigation  appears  to  in¬ 
volve  accounting  issues  related 
to  events  that  took  place  in  late 
2000,  prior  to  his  arrival  at  the 
company  early  last  year. 

On  Dec.  26,  2000,  Network 
Associates  announced  the  res¬ 
ignations  of  its  CEO,  president 
and  chief  financial  officer  and 
said  it  would  make  sweeping 
changes  in  its  revenue  recogni¬ 
tion  policy.  It  also  warned  that 
sales  in  that  year’s  fourth  quar¬ 
ter  would  be  well  below  expec¬ 
tations,  starting  a  string  of  five 
straight  quarterly  losses. 

Since  then,  the  company  has 
taken  a  series  of  restructuring 
steps  aimed  at  cutting  costs 
(see  box).  Samenuk  last  week 
said  he  doesn’t  expect  the  SEC 
probe  “to  have  any  effect  on 
our  day-to-day  business,  our 
current  customers  or  future 
growth  opportunities.” 

Chris  Christiansen,  an  ana¬ 
lyst  at  Framingham,  Mass.- 
based  IDC,  said  Network  Asso¬ 
ciates  has  made  a  “pretty  dra¬ 
matic”  turnaround  in  terms  of 
its  products  and  sales.  “My 
guess  is  that  this  investigation 
is  more  about  the  past  [than 
the  present],”  he  said.  > 


When  seldom  is  heard  a  discouraging  word,  chances  are  it’s  because  your  customer 
relationships  are  running  efficiently  and  profitably.  With  J.D.  Edwards  solutions  and 
services  for  Customer  Relationship  Management,  you’re  able  to  leverage  customer  knowledge 

and  experience  to  build  even  more  profitable  relationships.  Find  out  how  to  ‘ 

soundproof  your  company.  Call  1-888-895-6402  now  and  ask  for  our  CRM  Info  Packet  JDE  D  WARDS 

or  go  to  www.jdedwards.com/peace. 

I  www.idedwards  com-  peace 

I 


peace 

and  quiet  can  be  the  most 
reassuring  sounds  of  all. 
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PATRICIA  KEEFE 


Pins  and  Needles 


THERE’S  A  LOT  OF  TOE-TAPPING  and 

pent-up  impatience  in  the  IT  commun¬ 
ity,  and  I’m  not  talking  about  the  people 
in  the  Northeast  who  are  still  waiting 
for  winter  or  those  in  the  Pacific  North¬ 
west  waiting  for  it  to  end. 

We’re  all  stuck  in  a  holding  pattern  right  now, 


even  those  of  us  who 
aren’t,  as  of  this  moment, 
trapped  in  some  godfor¬ 
saken  airport  watching 
the  hours  tick  by.  There 
are  bigger  delays  to  wor¬ 
ry  about  and  smaller,  but 
significant,  changes  to 
keep  an  eye  on. 

Let  the  pundits  talk 
about  the  so-called  invisi¬ 
ble  recession.  Most  of  us 
are  still  waiting  for  the 
economy  to  pick  itself  up 
so  business  (and  job  of¬ 
fers)  can  start  rolling  in. 

We’re  waiting  to  see  the  start  of 
the  future  for  a  handful  of  the  indus¬ 
try’s  leading  vendors: 

■  How  will  new  IBM  CEO  Sam 
Palmisano  build  on  the  foundation 
left  by  Lou  Gerstner?  As  a  proponent 
of  Linux,  how  far  will  he  integrate 
the  youthful  operating  system  into 
IBM’s  venerable  product  line? 

K  Will  Microsoft  wriggle  out  from 
under  the  antitrust  case  with  its 
strategies  and  trademark  approach 
to  business  intact?  Can  it  come  up 
with  enough  of  an  incentive  to  cut 
through  the  inertia  surrounding  its 
more  recent  product  releases?  Can 
the  company  get  the  security  mon¬ 
key  off  its  back? 

■  How  long  will  it  take  Hewlett- 
Packard  and  Compaq  to  detail  their 
merged  product  plans?  What’s  stay¬ 
ing  and  what’s  going?  It’s  pins  and 
needles  time. 

We’re  waiting  for  clarity  on  murky 
:  icing  plans.  Will  Oracle,  struggling 

■  nd  revenue,  stick  it  to  some  cus- 
;  -  v  s  by  trying  to  impose  extrane- 

i  t  'using  fees?  Researchers  at 
t  and  Meta  Group  seem  to 
-  both  have  issued  alerts  to 


Patricia  keefe  is  editorial 
director  at  Computer- 
world.  You  can  contact 
her  at  patricia_keefe@ 
computerworld.com. 


customers.  There  is  also 
concern  brewing  about 
some  mainframe  soft¬ 
ware  vendors  not  sup¬ 
porting  usage-based  pric¬ 
ing  models.  And  users 
have  complained  about 
Microsoft’s  new  licens¬ 
ing  fees. 

We’re  waiting  for  secu¬ 
rity  to  be  taken  seriously. 
An  Ernst  &  Young  global 
information  security  sur¬ 
vey  of  459  CIOs  and  IT 
directors  is  startling  to 
the  extent  that  it  shows  the  contin¬ 
ued  irresponsible  approach  these 
businesses  take  toward  defending 
against  and  investigating  security 
breaches  (see  story,  page  10). 

We’re  waiting  for  standards  and 
security  in  the  wireless  arena  so  we 
can  get  on  with  next-generation  net¬ 
working. 

Some  of  this  will  sort  itself  out  in 


good  time,  but  users  can  help  pro¬ 
vide  direction  or  even  speed  things 
along.  Here’s  how: 

■  Realize  that  flat  budgets  put  you 
in  the  driver’s  seat.  Vendors  are 
mumbling  about  longer  sales  cycles, 
allocation  of  available  dollars  and 
changes  in  how  users  are  buying 
services  and  products.  Press  for 
discounts  and  deploy  big  projects  in 
small  chunks.  It’s  a  smart  approach, 
making  sure  that  ROI  appears  every 
step  of  the  way,  the  milestones  are 
met  and  the  vendors  are  accountable 
and  involved. 

■  Don’t  let  core  vendors  off  the 
hook.  Demand  strategic  blueprints 
and  concrete  product  and  support 
plans.  Insist  that  they  spell  out  the 
ramifications  of  new  pricing  plans. 

■  Contribute  to  and  collaborate  on 
standards  campaigns.  It’ll  help  drive 
the  process  in  the  direction  you  want 
it  to  go. 

■  Quit  screwing  around  when  it 
comes  to  security.  It’s  a  threat  to 
your  systems,  your  data,  your  com¬ 
pany,  your  customers  and,  in  some 
cases,  your  country. 

■  Start  planning  for  postrecession 
project  management  and  staffing 
challenges. 

That  ought  to  relieve  a  few  of  the 
pins  and  needles  while  you  wait  for 
the  future  to  get  here.  I 


UtLTOG. 


PIMM  FOX 

Treat  Staff 
Royally  in 
Down  Times 

THE  CORE  OF  your  IT 
operations  is  people. 
You’re  to  be  forgiven  if 
you’ve  occasionally  imagined 
that  integration  efforts,  data 

centers,  storage,  Web  services 
or  even  software  held  first  place  in 
the  hierarchy  of  what  makes  or 
breaks  IT  per¬ 
formance.  Af¬ 
ter  all,  that’s 
what  has  got¬ 
ten  most  of 
your  attention. 

It’s  critical, 
however,  that 
you  don’t  lose 
sight  of  your 
core,  especially 
when  we’re  in 
an  economic 
slump,  during 
which  IT  pro¬ 
fessionals  have  watched  colleagues 
depart,  projects  get  dumped  and  com¬ 
panies  retrench. 

These  are  the  times  that  will  test 
your  true  talents  as  an  IT  leader. 
“Managers  forget  in  down  times  they 
need  to  look  at  the  workforce  that  is 
left,”  says  Milan  Moravec,  CEO  of 
Moravec  and  Associates,  a  business 
consulting  firm.  “Most  managers  think 
once  they  have  laid  people  off  and  cut 
the  budget,  they  can  wash  their  hands 
of  the  situation  and  breathe  a  sigh  of 
relief.” 

That  would  be  a  big  mistake,  says 
Moravec,  because  most  employees 
don’t  view  layoffs  as  part  of  some 
larger  economic  cycle.  “The  employ¬ 
ees  who  are  left  remember  the  pain 
of  their  colleagues  and  want  to  blame 
management  for  pink  slips  and  the 
poor  business  decisions  made  during 
heady  times,”  he  says. 

Indeed,  while  many  managers 
assume  that  the  employees  still  on 
the  payroll  will  remain  loyal  and  grate¬ 
ful,  a  better  economy  could  encourage 
many  survivors  to  jump  at  the  first 
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Forget  all  of  the  marketing  hype  about  net¬ 
worked  storage  and  the  silver  bullet  it 
provides  in  terms  of  storage  cost  reduc¬ 
tion.  The  simple  fact  is  that  without  effec¬ 
tive  management,  networked  storage  topologies  offer  no 
more  cost  savings  than  the  traditional  server- attached 


topologies  they  seek  to  replace. 


Without  management,  networked 
storage  technologies  like  network 
attached  storage  (NAS)  and  storage 
area  networks  (SANs)  may  actually 
contribute  to  the  total  cost  of  owner¬ 
ship  (TCO)  for  a  company’s  storage 
infrastructure.  While  these  technolo¬ 
gies  may  indeed 
enable  storage 
capacity  to  scale 
non-disruptively  in 
the  face  of  bur¬ 
geoning  data,  more 
often  than  not, 
increased  capacity 
translates  simply 
to  a  need  to  hire  more  staff  to  admin¬ 
ister  and  “groom”  the  storage  plat¬ 
forms.  Moreover,  in  an  unmanaged 


By  Jon  William 
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networked  storage  environment,  the 
increased  accessibility  of  data  afford¬ 
ed  by  the  topology  may  well  translate 
to  increased  opportunity  for  data  cor¬ 
ruption  and  increased  need  for 
administrator  oversight  and  interven¬ 
tion. 

When  presented  with  projections 
from  Framingham,  Mass.-based  mar¬ 
ket  research  firm  International  Data 
Corp.  of  an  anticipated  67%  to  68% 
increase  in  networked  storage  tech¬ 
nology  adoption  through  2004,  long¬ 
time  industry  watcher  and 
Disk/Trend  President  James  Porter 
observes  that  NAS  and  SAN  would 
not  displace,  but  would  more  likely 
co-exist  with  server- attached  storage 
and  internal  server  disk  for  at  least  a 


Abstract 

As  users  strive  to  control 
their  exponentially  expanding 
data,  the  need  for  heteroge¬ 
neous  storage  management  is 
more  important  than  ever  for 
the  storage  networking  indus¬ 
try.  This  situation  has  created 
both  an  opportunity  and  a  chal¬ 
lenge  for  vendors  that  must 
work  together  on  the  creation 
of  standards  if  they  are  to  ulti¬ 
mately  provide  the  full  value  of 
their  products.  This 
Computerworld  White  Paper, 
written  by  noted  writer  and 
industry  consultant  Jon  William 
Toigo,  takes  a  look  at  current 
data  management  solutions, 
suggests  interim  user  strate¬ 
gies,  and  lays  the  groundwork 
for  long-term  implementations. 
It  also  features  practical  case 
studies. 


decade.  “It  isn’t  as  though  companies 
fielding  networked  storage  solutions 
are  ripping  out  their  existing  invest¬ 
ment  in  storage  technology,”  Porter 
says. 
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Porter’s  observation  alluded  to 
what  has  become  a  nagging  industry 
truth  today:  networked  storage 
acquisitions  have  not  simplified  stor- 
age  management,  but  rather  have 
added  greater  complexity  -  and  cost  - 
by  multiplying  the  number  and  type 
of  “targets”  that  the  typical  enterprise 
IT  organization  must  manage. 

Storage  is  the  last  bastion  of  enter¬ 
prise  information  technology  that 
lacks  either  open  or  de  facto  manage¬ 
ment  standards.  In  the  absence  of 
standards  that  can  be  used  to  manage 
the  heterogeneous  components  and 
processes  that  comprise  a  typical 
storage  infrastructure,  companies 
continue  to  struggle  with  the  costly 
challenge  of  managing  their  mission- 
critical  data  armed  only  with  the  21st 
Century’s  equivalent  of  stone  knives 
and  throwing  sticks. 

Is  a  solution  to  this  problem  wait¬ 
ing  in  the  wings?  The  answer  is  a 
highly  qualified  “Maybe.” 

The  current  state  of  storage 
management  tools 

Storage  administrators  often  use 
the  metaphor  of  a  quiver  of  arrows  to 
describe  the  tools  they  use  to  perform 
their  work.  They  are  referring  to  an 
assortment  of  “point  management” 
software  products,  each  of  which  is 
designed  to  perform  a  certain  discrete 
task.  These  point  solutions  are  often 
limited  to  a  single  vendor’s  storage 
component. 

Point  management  tools  have  pro¬ 
liferated  over  the  past  several  years  to 
address  a  host  of  specific  tasks  -  from 
device  discovery  to  disk  tuning  to 
backup-and-restore  functions.  For 
the  most  part,  storage  administrators 


have  kludged  together  what  they  feel 
are  best-of-breed  products  in  each 
functional  area;  they  then  carry  these 
tools  with  them  as  they  travel  from 
one  server  or  storage  platform  to  the 
next. 

According  to  administrators,  there 
are  problems  with  the  point-manage- 
ment-tool  approach.  For  one  thing, 
there  are  so  many  products  that  it’s 
difficult  to  maintain  a  current  knowl¬ 
edge  of  the  capabilities  and  limita- 


Forget  the  marketing 
hype  about  networked 
storage  and  the  silver 
bullet  it  provides  in 
terms  of  cost  reduction. 
Without  effective  man¬ 
agement,  networked 
storage  topologies  offer 
no  cost  savings  over 
the  traditional  server- 
attached  topologies 
they  seek  to  replace. 


tions  of  each,  or  to  ensure  that  the 
best  tools  for  the  job  are  identified 
and  used.  For  another,  using  a  multi¬ 
plicity  of  products  carries  a  potential¬ 
ly  huge  cost  in  terms  of  licensing,  ver 
sion  management,  and  knowledge 
transfer. 

A  glimmer  of  hope  was  seen  two 
to  three  years  ago,  when  some  of  the 
larger  storage  management  software 


vendors  began  gobbling  up  some  of 
the  smaller  fry  and  repackaging  the 
point  products  as  storage  resource 
management  (SRM)  software  suites. 
However,  the  results  of  this  acquisi¬ 
tions  frenzy,  according  to  many  stor¬ 
age  managers,  have  been  somewhat 
disappointing.  According  to  corpo¬ 
rate  IT  managers,  many  of  the  SRM 
suites  introduced  to  market,  despite 
the  claims  of  their  marketing 
brochures,  are  poorly  integrated  and 
include  tools  that  are  either  not  best 
in-class  or  are  simply  irrelevant  with 
in  the  administrator’s  particular  stor¬ 
age  product  mix. 

Ideally,  users  say,  storage  manage¬ 
ment  software  would  enable  the  poli¬ 
cy-based  automation  of  management 
tasks.  That  way,  fewer  administrators 
would  be  required  to  manage  a  grow¬ 
ing  storage  pool.  Automated  manage¬ 
ment  has  been  the  goal  of  another 
class  of  storage  management  product 
vendors,  those  offering  “management 
frameworks.” 

Framework  products  use  agent 
based  software  to  monitor  storage 
infrastructure  components,  and  also 
to  return  status  or  event  messages  to 
a  centralized  monitoring  console. 
Ultimately,  the  goal  of  most  frame¬ 
work  vendors  is  to  have  their  prod 
ucts  do  more  than  simply  monitor  for 
events  and  alarms.  These  vendors 
want  to  enable  their  products  to  per¬ 
form  most  storage  management  tasks 
as  well  -  with  or  without  the  partici¬ 
pation  of  the  console  operator.  At  a 
minimum,  these  vendors  want  users 
to  be  able  to  launch  point  tools  or 
SRM  suites  from  the  console,  effec¬ 
tively  centralizing  the  management 
task.  Ideally,  they  want  to  instrument 
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storage  so  that  a  given  action  will  be 
initiated  automatically  in  software 
when  a  particular  “out  of  threshold” 
event  or  constellation  of  events  is 
detected. 

When  such  a  centralized  and 
intelligent  management  approach 
will  come  to  market  is  anyone’s  guess. 
Currently,  the  bulk  of  the  program' 
ming  resources  within  most  frame' 
work  vendor  development  shops  are 
dedicated  full  time  to  writing  device 
drivers,  according  to  industry  insid' 
ers.  They  must  ensure  that  their  prod' 
uct  maintains  its  capability  to  moni' 
tor  the  myriad  new  releases  of  host- 
bus  adapters,  array  controllers,  and 
SAN  switches  and  hubs  that  are 
introduced  by  storage  vendors  each 
year. 

Moreover,  they  must  spend  sub' 
stantial  money,  time,  and  effort  in 
order  to  cultivate  good  relations  with 
storage  hardware  vendors  so  that 
they’ll  continue  to  enjoy  access  to 
application  programming  interfaces 
(APIs),  command  line  interfaces,  and 
self' articulated  Web  pages  with 
which  the  vendors  instrument  their 
platforms  for  management.  Under 
these  circumstances,  finding  addi- 
tional  programming  resources  to 
WTite  automation  routines  is  a  major 
challenge. 

Finally  in  this  taxonomy  of  storage 
management  products,  it’s  worth 
mentioning  that  a  new  category  of 
management  has  been  introduced 
very  recendy  -  in  the  past  several 
months.  This  new  class  of  storage 
management  software  seeks  to  man- 
age  storage  as  a  service,  complete 
with  service-level  agreement  (SLA) 
monitoring  and  reporting,  as  w’ell  as 


back' end  links  to  customer  relation- 
ship  management  (CRM)  and 
accounting  systems. 

Vendors  in  this  space  tend  to  be 
the  early  storage  service  providers 
(SSPs)  that  appeared  in  the  late  1990s, 
but  found  little  market  for  the  con¬ 
cept  of  delivering  storage  as  a  service. 
Prospective  clients  were  less  interest¬ 
ed  in  these  vendors’  services  than 
they  were  in  the  software  the  vendors 
had  developed  to  manage,  measure, 


and  bill  clients.  The  SSPs  have  mutat¬ 
ed  into  software  vendors  and  are 
bringing  their  storage  SLA  reporting 
tools  to  market,  creating  yet  another 
tier  of  storage  management  software. 

The  crux  of  the  matter 

Though  it  is  rarely  perceived,  the 
core  problem  confronting  storage 


administrators  in  their  quest  for  effec¬ 
tive  storage  management  is  the  indus¬ 
try’s  resistance  to  the  development  of 
a  common  management  standard. 
Some  support  the  Simple  Network 
Management  Protocol  (SNMP), 
which  is  used  to  monitor  network 
devices  such  as  LAN  switches  and 
routers.  But  this  is  by  no  means  a  uni¬ 
versal  characteristic. 

For  the  most  part,  the  products  of 
a  particular  storage  vendor  are  instru¬ 
mented  for  management  using  pro¬ 
prietary  software  tools.  Most  vendors 
leverage  their  proprietary  manage¬ 
ment  schemes  to  sell  more  of  then- 
own  products.  The  message  from 
each  vendor  is  that  tremendous  TCO 
advantages  can  be  realized  by  the  IT 
shop  that  buys  that  vendor’s  products 
alone. 

In  organizations  that  decide  to 
standardize  on  the  platform  of  a  sin 
gle  vendor  and  to  field  a  homoge¬ 
neous  storage  infrastructure,  storage 
TCO  improvements  based  on 
reduced  labor  costs  are,  in  fact,  possi¬ 
ble.  However,  in  most  enterprises,  the 
heterogeneity  of  the  storage  infra¬ 
structure  can  be  discerned  by  a  quick 
glance  at  the  multi-colored  racks  and 
cabinets  in  the  data  center  and  in 
business  unit  equipment  rooms. 
Often,  homogeneous  storage  trans¬ 
lates  to  a  vendor  lock-in  -  an  uncom¬ 
fortable  proposition  to  many  IT  man¬ 
agers,  CIOs,  and  CTOs,  especially 
given  the  lack  of  a  clear  industry 
leader  in  the  storage  market.  The  old 
dictum  “no  one  ever  gets  fired  for 
buying  IBM”  has  found  no  equivalent 
in  the  storage  space. 

In  many  shops,  heterogeneous 
storage  is  guaranteed  by  the  “tactical” 
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-  a  polite  way  of  saying  “knee-jerk”  - 
manner  in  which  storage  products  are 
acquired.  Unaided  by  effective  stor¬ 
age  management  tools,  data  is  often 
poorly  groomed,  capacity  utilization 
is  often  poorly  tracked,  and  proactive 
or  strategic  product  acquisition  deci¬ 
sion-making  falls  prey  to  reactive 
seat-of-the-pants  purchasing  in 
response  to  “Disk  Full”  error  mes¬ 
sages. 

The  resulting  infrastructure  is 
hard  to  manage  without  a  common 
management  standard.  However,  ven¬ 
dors  lack  motivation  to  commoditize 
their  storage  offerings  by  cooperating 
meaningfully  with  any  standards- 
making  effort,  especially  given  a  lack 
of  a  compelling  business  reason  for 
doing  so.  IT  organizations  just  aren’t 
clamoring  for  a  common  storage  man¬ 
agement  solution,  according  to  one 


vendor  spokesperson.  Until  they  do, 
the  Balkanized  world  of  storage  man¬ 
agement  will  remain  much  as  it  is 
today. 

Coping  with  disarray 

There  have  indeed  been  multiple 
industry  initiatives  aimed  at  intro¬ 
ducing  storage  management  stan¬ 
dards.  One  that  has  received  Up  serv¬ 
ice  (but  little  action  by  vendors)  is  the 
Common  Information  Model  (CIM) 
effort  spearheaded  by  the  Storage 
Networking  Industry  Association 
(SNIA).  Championed  by  Mark 
Carlson,  an  SNIA  director  who  works 
on  storage  management  tools  at  Sun 
Microsystems  Inc.  for  a  living,  CIM 
seeks  to  describe  all  storage  compo¬ 
nents  as  object.  CIM  proponents  say 
this  is  a  first  step  in  instrumenting 
heterogeneous  storage  for  common 
management. 

CIM  has  reared  its  head  before,  in 
the  desktop  management  arena. 
There  it  encountered  some  of  the 
same  results  as  current  storage  CIM 
efforts.  Vendors  agreed  that  manage¬ 
ment  was  needed,  but  rebelled 
against  the  notion  of  any  one-size- 
fits-all  standard  that  could  capture 
the  unique  features  and  functions 
that  differentiated  their  products 
from  those  of  competitors. 

Operating  system  vendors,  includ¬ 
ing  Microsoft  Corp.  and  Sun,  have 
instrumented  their  products  for  CIM 
management,  so  storage  that  is  still 
“owned”  by  servers  can  be  monitored 
and  managed  to  some  extent  by  CIM. 
However,  the  thrust  of  the  networked 
storage  effort  is  to  divorce  storage 
from  direct  attachment  with  servers, 
and  this  means  storage  product  ven¬ 


dors  must  implement  CIM  on  their 
own  platforms.  To  date,  no  vendors 
have  done  so. 

The  challenge  to  CIM  comes  in  the 
form  of  EMC  Corp.’s  AutoIS  initia 
tive.  Last  fall,  the  storage  vendor 
began  to  introduce  a  set  of  technolo¬ 
gies,  built  on  its  proprietary  products, 
that  are  intended  to  enable  cross- 
platform  storage  management.  Many 
people  who  are  involved  in  the  CIM 
effort  perceived  the  AutoIS 
announcement  as  a  shot  across  their 
bow  -  an  effort  by  EMC  to  impose  a 
de  facto  standard  (a  la  Microsoft  in 
the  desktop  world)  on  the  manage¬ 
ment  of  storage. 

EMC  proposes  an  API  middle¬ 
ware  layer,  called  WideSky,  that  ven¬ 
dors  may  elect  to  use  to  interface  their 
products  to  EMC’s  proprietary  man 
agement  software  console, 


Point  management 
tools  have  proliferated 
to  address  specific 
tasks.  Most  storage 
administrators  have 
kludged  together  what 
they  feel  are  best-of- 
breed  products  in  each 
functional  area;  they 
then  carry  these  tools 
with  them  as  they  travel 
from  one  server  or  stor¬ 
age  platform  to  the  next. 
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And  now,  a  few  words 
about  data  back  up: 


For  the  tech  crowd: 

BrightStor™  Storage  Software 

More.  More.  And  now.  These  ore  the  words  most  frequently 
associated  with  storage  needs.  The  explosion  in  web  activity, 
the  perpetually  increasing  number  of  applications  coming 
out  that  require  larger  databases  and  the  spiraling  complexity 
of  enterprise  storage  solutions  has  increased  the  demand  for 
immediate  solutions  to  growing  storage  problems. 

That's  why  there's  BrightStor  from  Computer  Associates  (CA). 
The  most  comprehensive  family  of  storage  solutions  on  the 
market,  BrightStor  solutions  are  completely  and  totally  open. 
Which  means  that  unlike  most  vendors,  who  are  focused 
solely  on  their  individual  solutions,  BrightStor  can  bring 
multi-vendor  systems  and  environment  together  seamlessly. 

What  does  this  mean  for  you?  It  means  optimization  of 
resources  across  all  platforms  and  storage  types.  It  means  a 
greater  understanding  of  your  storage  resources  and  how  to 
best  allocate  them  to  fit  your  needs.  And  it  means  a  lower 
total  cost  of  ownership. 

Specifically,  BrightStor  provides  you  with  unparalleled  data 
protection,  real-time  data  availability,  and  the  ability  to  view, 
manage,  and  monitor  your  resources  from  a  central  location. 
And  BrightStor  is  the  only  software  of  its  kind  that 
incorporates  CA's  portal  technology —  the  leading  portal 
solution  on  the  market. 

Why  rely  on  Computer  Associates?  Because  we're  a 
completely  independent  software  company  with  over 
25  years  of  experience.  That's  how  we  got  to  be  the 
software  management  experts.  And  that's  why  99%  of 
the  Fortune  500®  rely  on  our  software. 

We  know  that  storage  is  no  longer  just  backing  up  what  you 
already  have.  It's  facilitating  integration  with  every  aspect  of 
your  entire  eBusiness.  It's  leveraging  all  of  your  existing 
capabilities  to  maximize  your  resources  enterprise-wide.  And, 
most  important,  it's  using  what  you  have  to  find  future 
opportunities  and  capitalize  on  them. 


For  everybody  else 

Reliable = Good. 
Unreliable  =  Bad. 


Computer  Associates™ 


HELLO  TOMORROW"  WE  ARE  COMPUTER  ASSOCIATES  I  THE  SOFTWARE  THAT  MANAGES  eBUSINESS™  ca.com/brightstor/storage 
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In  most  enterprises, 
the  heterogeneity  of  the 
infrastructure  can  be  dis¬ 
cerned  by  a  quick  glance 
at  the  multi-colored 
racks  in  the  data  center. 
Too  often,  homogeneous 
storage  translates  to 
vendor  lock-in,  an  uncom¬ 
fortable  proposition  to 
many  IT  managers  given 
the  lack  of  a  clear  indus¬ 
try  leader. 


ControlCenter/Open  Edition.  What 
gives  legs  to  this  approach  is  EMC’s 
prominent  position  in  the  market; 
smaller  storage  equipment  or  soft' 
ware  vendors  seeking  to  sell  product 
into  an  EMC  account  may  find  it  use- 
ful  to  be  able  to  claim  that  their  tech' 
nology  can  be  managed  by  the  man¬ 
agement  software  already  used  by  the 
customer. 

The  idea  has  attracted  the  interest 
of  many  storage  players,  including 
Compaq  Computer  Corp.,  on  the  one 
hand.  On  the  other,  it  has  also  created 
a  furious  cry  of  “Foul!”  from  many  of 
EMC’s  leading  storage  competitors. 
These  detractors,  including  Hitachi 
Data  Systems  and  IBM,  are  now  rally¬ 
ing  around  SNIA  and  CIM,  which 
they  view  as  open  alternatives  to 
EMC’s  “Open  Edition.” 

In  the  final  analysis,  the  EMC  ini¬ 


tiative  may  bring  about  a  common 
management  standard  -  whether  a  de 
facto  standard  imposed  by  an  indus¬ 
try  leader,  or  an  open  standard  reluc- 
tandy  agreed  to  by  storage  vendors 
unwilling  to  give  EMC  bragging 
rights  for  having  solved  the  storage 
dilemma. 

Until  a  standard  does  arrive, 
enterprises  must  cope  with  burgeon¬ 
ing  data  growth  and  shrinking  IT 
budgets  using  a  kludge  of  point, 
SRM,  and  framework  management 
products.  Networked  storage,  SANs 
in  particular,  are  not  making  things 
any  easier. 

Current-generation  SANs,  which 
are  based  on  Fibre  Channel  technolo¬ 
gy,  do  not  provide  IT  organizations 
with  the  means  to  support  in-band 
management,  or  “management-in- 
the-wire.”  Such  functionality  was 
deliberately  excluded  by  the  people 
who  invented  Fibre  Channel  at  IBM 
about  a  decade  ago  in  order  to  pre¬ 
serve  the  maximum  amount  of  band¬ 
width  for  moving  data  and  SCSI  com¬ 
mands  from  server  to  storage  plat¬ 
form.  This  is  an  issue  the  Fibre 
Channel  Industry  Association  is 


working  to  resolve  by  adding  “Fabric 
Services”  into  the  protocol: 

At  the  same  time,  two  camps  of 
vendors  -  Cisco  Systems  Inc.  and 
Adaptec  Inc.  on  the  one  hand,  and 
Hitachi  Data  Systems,  Nishan  Corp., 
and  Alacritech  Inc.  on  the  other  - 
announced  in  January  that  they  will 
introduce  a  new  IP- based  version  of 
SAN  technology  to  market  before 
year’s  end.  These  new  IP  SANs,  which 
will  use  an  early  specification  for 
iSCSI  until  the  Internet  Engineering 
Task  Force  completes  work  on  a  final 
version  of  the  standard,  will  hit  the 
streets  about  two  years  earlier  than 
analysts  predicted.  Because  these 
SANs  are  based  on  a  protocol  that 
uses  IP  networking,  they  will  also  be 
manageable  via  the  same  SNMP  that 
has  been  used  for  years  in  the  LAN 
space. 

It  remains  to  be  seen  which  proto¬ 
cols  and  management  schemes  will 
come  to  the  fore  as  industry  stan¬ 
dards.  Until  a  leader  is  established, 
the  cost  of  ownership  of  storage  will 
continue  to  accelerate  in  all  but  the 
most  homogeneous  storage  infra¬ 
structures.-:?:- 


This  White  Paper  was  created  by  Computerworld’s  Custom  Pub¬ 
lishing  group.  Comments  on  this  supplement  can  be  sent  to 
Carolyn  Medeiros  at  carolyn_medeiros@computerworld.com. 

This  White  Paper,  as  well  as  other  custom  supplements,  can  be 
viewed  online  at  www.computerworld.com. 
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If  You're  Building  A  SAN,  Why  Not  Consider  Using  The  Some  Solutions 
That  Are  At  The  Heart  Of  96%  Of  The  World's  Storage  Networks? 


Hard  at  work  at  the  very  heart  of  the  world's  most  demanding  and  reliable  storage 

networks,  you'll  find  McDATA  enterprise  solutions.  In  over  70  of  the  Fortune  W  f  % 

100, 10  of  the  15  largest  U.S.  banks,  and  9  of  the  10  top  ISPs.  We've  ^  C  I 

leveraged  our  open  storage  networking  technology  and  fabric  management  software 

expertise  to  create  a  full  family  of  open  enterprise  solutions  —  core-to-edge.  MCDATA 

Doy-in  and  day-out  delivering  99.999%  availability  to  some  of  the  world's  most  core-to-fdge  Enterprise  Solutions 

prominent  companies,  we  have  the  experience  you  can  rely  on,  too.  So  go  to  our  1.800.545.5773 

web  site  or  give  us  a  call.  Without  a  doubt,  we've  got  a  solution  that  fits  your  needs.  www.mcdata.com/cvsrwp 


Core-to-Edge 
Enterprise  Solutions 

that  span  from  the  data  center,  to  the 
department  level,  all  the  way  to  the 
very  edge  of  your  enterprise. 


McDATA  is  o  tegistered  trademork  ol  McDATA  Corporation.  The  McDATA  logo  pud  tagline  ore  trademarks  of  McDATA  Corporation. 
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Bank  Goes  Global,  Finds  24/7  Solution 

CA's  BrightStor  EB  helps  financial  institution  meet  new  demands 


Founded  in  1979,  Hemisphere  Na- 
tional  Bank  (HNB)  began  as  a  local 
financial  institution  dedicated  to 
serving  the  needs  of  the  South  Flori¬ 
da  community.  Building  steadily  on 
its  reputation  for  customer  service 
and  commitment,  HNB  was  soon 
ready  to  expand  beyond  its  original 
Miami  branch;  the  bank  opened  ad¬ 
ditional  Miami  branches  and  ex¬ 
panded  to  Coral  Gables  and  Aventu¬ 
ra,  Fla.  HNB  quickly  diversified  and 
began  to  offer  a  wide  array  of  indi¬ 
vidual  and  business  services,  from 
Internet  banking  to  commercial 
lending  and  credit  card  processing. 

Managing  data  growth 

In  1998,  the  management  of  HNB 
decided  to  broaden  its  services  again 
to  reach  an  international  clientele. 
With  the  establishment  of  its  Inter¬ 
national  Division,  HNB  added  a  se¬ 
ries  of  new  offerings,  including  pre- 
and  post-export  trade  financing, 
that  doubled  the  company’s  growth. 
The  breadth  of  these  new  products 
and  the  exponential  increase  in  data 
that  they  generated  made  it  neces¬ 
sary  for  HNB  to  dramatically  in¬ 
crease  its  storage  capabilities  as  well. 

The  IT  management  team  at  HNB 
decided  to  deploy  a  network- at 
tached  storage  (NAS)  system  to  meet 
this  challenge,  and  evaluated  numer¬ 
ous  backup- and -restore  solutions. 
The  team  determined  that  only 
Computer  Associates  International 


Inc.’s  BrightStor  Enterprise  Backup 
(EB)  was  robust  enough  to  handle 
the  storage  management  tasks  for  its 
global  operations.  Working  with  As- 
pedient  Technologies,  a  CA-certified 
managed  service  provider,  HNB  im¬ 
plemented  BrightStor  EB  in  less  than 
three  weeks. 

Addressing  e-business  demands 

HNB  Hewed  the  ability  to  back 
up  and  restore  growing  volumes  of 
data  within  a  shrinking  backup  win 
dow'  as  its  most  critical  objective. 
“Providing  high  data  availability  for 
HNB’s  expanding  network  of  inter¬ 
national  clients  was  essential,”  says 
Tony  Silva,  co-CEO  at  Aspedient 
Technologies.  “The  unsurpassed 
backup  speeds  of  BrightStor  EB  have 
enabled  HNB  to  offer  its  global  cus¬ 
tomers  unimpeded  access  to  data 


The  bank  viewed  the 
ability  to  back  up  and 
restore  growing  volumes 
of  data  in  a  shrinking 
backup  window  as  criti¬ 
cal.  Providing  high  avail¬ 
ability  for  a  network  of 
international  clients  was 
deemed  essential. 


and  e-banking  services  24  hours  a 
day,  365  days  a  year.” 

Maximum  uptime  has  become  in¬ 
creasingly  critical  as  HNB  continues 
to  expand  its  e-banking  services.  In 
2001,  HNB  acquired  the  assets  of  a 
competing  bank  with  a  global  cus¬ 
tomer  base,  extending  the  demands 
on  its  storage  infrastructure  across 
multiple  time  zones.  “Hemisphere 
National  Bank  has  become  an  insti¬ 
tution  without  borders,  and  this 
makes  performance  and  data  avail¬ 
ability  key  to  our  long-term  success,” 
says  Miguel  Morera,  HNB’s  CIO. 
“The  ability  of  BrightStor  EB  to  de¬ 
liver  a  clean,  central  solution  for 
high-speed  backup  has  enabled  us  to 
take  on  these  new'  24/7  markets  with 
confidence.” 

The  speed  and  reliability  of  Bright¬ 
Stor  EB  aren’t  the  only  benefits  HNB 
is  leveraging  to  further  its  expansion 
into  new  markets.  “Its  centralized 
administration  and  reporting  capa¬ 
bilities  enable  us  to  proactively  man¬ 
age  the  backup -and-restore  process, 
reducing  the  burden  on  personnel,” 
Silva  says. 

From  the  BrightStor  console, 
members  of  the  IT  team  can  view  re  ¬ 
ports  about  completed  backup  jobs, 
monitor  the  performance  of  HNB’s 
storage  servers,  and  evaluate  the  disk 
capacity  of  its  DASDs.  The  IT  group 
at  the  bank  says  BrightStor  EB  is  a 
significant  part  of  their  successful 
growth. 
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FAILURE  IS  NOT  AN  OPTION 

LOOK  FOR 
THE  DLTtape  LOGO. 


For  more  than  a  decade,  DLTtape™  technology 
has  been  known  for  its  unparalleled  reliability 
in  data  protection  and  retrieval.  In  fact, 
DLTtape  cartridges  must  pass  a  stringent 
process  to  become 
fully  qualified  and 
display  the 
DLTtape  logo. 

That’s  why  you’ll 
always  want  to  look  for 
the  DLTtape  logo  when  buying 
DLTtape  products.  It  ensures  that  your 
company’s  mission-critical  data  is  trusted 
to  quality  media  that  has  met  the  highest 
standards  for  reliability,  compatibility 
and  performance.  You’re  also  guaranteed 


to  be  getting  the  de  facto  standard  for  data 
backup  and  retrieval.  Products  that  do  not 
have  the  DLTtape  logo  have  not  met  these 
stringent  qualification  standards. 

So,  be 
sure  to  use 
cartridges 
that  carry  the 
DLTtape  logo. 
It  gives  you 
the  confidence  of  knowing  you’ve  purchased 
the  ultra-reliable  backup  solution  that’s 
chosen  5:1  by  IS/IT  managers.  To  find  out 
how  the  DLTtape  logo  has  become  the 
ultimate  symbol  of  quality  and  reliability, 
go  to  www.dlttape.com/qualified. 


f, 
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\ 

©2002  Quantum  Corporation.  All  rights  reserved.  The  DLTtape  logo  is  a  registered  trademark  and  DLTtape  is  a  trademark  of  Quantum  Corporation. 
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Making  News  with  NAS 

USA  Today  chooses  Network  Appliance  solution 
for  redundancy,  ease  of  use 


Darrell  Griffith  is  senior  infra¬ 
structure  architect  within  USA  To¬ 
day’s  Infrastructure  Technology 
Group.  He  played  a  critical  role  in  the 
newspaper’s  implementation  of  Net¬ 
work  Appliance  Inc.’s  filer  technology 
and  continues  to  monitor  the  N etApp 
solution  as  it  is  extended  and  expand¬ 
ed.  Griffith  recently  spoke  with  Bruce 
Hoard,  executive  editor  of  Storage 
Networking  World  Online 
(www.snwonline.com),  about  the 
challenges  and  benefits  associated 
with  network  attached  storage 
(NAS),  data  replication,  and  multi¬ 
protocol  support. 

Q:  Describe  the  storage  problems 
you  had  before  implementing  your 
Network  Appliance  solution. 

Griffith:  We  had  no  comprehen- 
sive,  large  enterprise-grade  storage 
solution  on  the  landscape  here  when 
we  began  a  serious  technology  inves¬ 
tigation  toward  the  end  of  2000. 
What  we  did  have  was  a  lot  of  what 
we  call  single-channel  storage  solu¬ 
tions  and  vertical  applications.  So  we 
had  to  find  a  comprehensive  enter¬ 
prise-grade  solution  that  worked 
well  with  our  existing  infrastructure 
and  complemented  our  core  compe¬ 
tencies  from  both  technology  and 
skill-set  perspectives. 


Q:  Describe  the  existing  infra¬ 
structure  you  had  to  work  with. 

Griffith:  We’ve  got  a  lot  of  Wintel 
type  stuff  -  our  Windows  2000  and 
XP  server  base.  We  also  have  our 
share  of  AIX  and  Solaris.  We  have  no 
AS/400,  midrange,  or  big  iron.  Most 
of  what  we  have  is  Unix  or  a  standard 
Microsoft-type  environment.  We 
have  some  pretty  powerful  RS/6000 
and  AlX-based  implementations  for 
a  lot  of  our  publishing  systems. 

Q:  What  process  did  you  follow 
in  selecting  a  storage  vendor,  and 
how  long  did  it  take? 

Griffith:  It  was  actually  straight¬ 
forward.  Three  or  four  of  us  were 
cobbled  into  an  ad  hoc  task  force  dur¬ 
ing  the  middle  to  end  of  2000,  and  we 
basically  set  about  reviewing  the  in¬ 
dustry.  First  and  foremost,  we  as¬ 
sessed  our  current  architectures  and 
tried  to  understand  not  just  the  host¬ 
ing  platforms  themselves,  but  also 
the  vertical  applications. 

We  could  find  certain  fits  that 
would  work  with  RS/6000s,  but 
those  machines  may  have  been  run 
ning  a  third-party  application  that 
wouldn’t  accommodate  certain  types 
of  storage  solutions.  So  we  spoke 
with  a  bunch  of  different  vendors  and 
did  informal  research. 


We  also  attended  a  very  beneficial 
Storage  Networking  World  confer¬ 
ence  in  Orlando  that  winter.  That’s 
really  where,  after  we’d  culled  all  our 
preliminary  information,  we  got  a 
much  better  feel  for  industry  direc¬ 
tions.  One  of  the  big  issues  I  had  with 
taking  a  particular  SAN  approach 
was  that  they  kept  wanting  me  to 
reinvent  something  that  was  pre-ex¬ 
isting,  that  being  the  network. 

Q:  What  happened  after  the 
Storage  Networking  World  show? 

Griffith:  We  basically  came  away 
looking  at  a  couple  of  big  players,  in¬ 
cluding  Network  Appliance,  in  the 
NAS  market.  We  compared  them  to  a 
bunch  of  other  NAS  competitors. 
Our  decision  to  go  with  Network  Ap¬ 
pliance  was  really  more  philosophi 
cal  than  it  was  based  on  cutting-edge 
technology.  NetApp  seemed  to  be  the 
best  entrenched,  and  they  seemed  to 
be  the  company  with  the  most 
proven  commitment  through  their 
R&D  and  their  technology.  They  had 
a  lot  of  strategic  initiatives  with  Mi¬ 
crosoft  as  well  as  a  clear  commitment 
to  the  Unix  standards,  which  was 
good  for  us.  it  was  a  case  of  looking  at 
a  business  partnership  for  the  long 
haul  in  terms  of  robust  technology 
and  where  it  was  going. 
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Co-owned 
and  Endorsed  by: 


Co-owned 
and  Produced  by: 


Europe’s  Leading 
Storage  Networking  Conference 

With  Industry  Leaders,  Business  Solutions  and  User  Perspectives 

STORAGE 


4-7  June,  2002  •  Noga  Hilton  Cannes  *  Cannes,  France 


The  educational  forum  for  IT  users  involved  in  storage  networking,  enter 
prise  infrastructure  and  data  management  to  support  business  solutions 


Europe's  foremost  gathering  of  storage  networking  industry  leaders, 
luminaries,  press  and  analysts 


The  worlds  most  comprehensive  Interoperability  Lab  with  companies  working 
together  with  demonstration  themes  complementing  the  conference  content 


Participants  benefit  from  real-life  user  case-studies,  practical  "tips  and  tools' 
workshops,  the  SNIA-produced  Technical  Tutorial  Series,  as  well  as  CTO  and 
ROI  insight  panels 


A  full  conference  package  including  primer,  tutorials,  general  sessions. 
Interoperability  Lab,  Expo,  meals,  receptions,  gala  dinner  and  golf  for  IT  users 


Complimentary  End-User  Golf  Outing,  Sponsored  by  Computer  Associates 


Sponsors  Participating  as  of  20  March,  2002: 


PLATINUM:  SPONSORS: 


in 


Intelligent  Storage  ” 


<a) 

Computer  Associates 


<bmc  are  EMC 

where  information  lives 


HITACHI  Wfip%  IBM  TotalStorage 

data  systems  Connected  Protected.  Complete. 

Iiteil 

PROC@M 


StoraceTek 


Cisco  Stiteiu 


BROCADE 
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Systems'  ^ 


FUJITSU 


IIMRAIMGE 


■  LEGATO 


NetworkAppliance* 


Quantum  ATL  sANcastle  VERITAS 


CONTRIBUTING 
SPONSORS:  | 

^DataCore 

necst 

Stor^B 


For  Information  on  Registration  and  Accommodations,  call  +33  497  06  36  67  or  visit: 

www.snweurope.com 

For  Information  on  Sponsorships,  contact  Daniel  Pein,  European  Representative,  at  +49  89  360  71  240  or  dpein@ksmesse.de 
Or  in  the  U.S.,  contact  Leo  Leger  at  +508  820  8212  or  leo_leger@computerworld.com 
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Q:  What  Network  Appliance 
product  or  products  did  you  buy? 

Griffith:  We  ended  up  going  with 
the  filers,  and  in  particular  the  cluster 
filers.  Media  and  data  availability 
was  one  of  our  strictest  criteria,  so 
we  bought  a  pair  of  F840  clusters 
about  a  year  and  a  half  ago.  We  put 
one  at  our  nationwide  headquarters 
in  McLean,  Va.,  and  the  second  over  a 
very  redundant  WAN  link  at  a  disas- 
ter  recovery  location  at  our  White 
Oak,  Md,  location  in  the  event  of  a 
failure  in  McLean.  Speed  was  impor¬ 
tant  and  feature  sets  were  important 
-  but  the  bottom  line  is  that  data  has 
to  be  available. 

Q:  What  was  your  vision  for  how 
the  products  would  be  implement' 
ed,  and  the  resulting  benefits? 

Griffith:  We  tinkered  with  a  low- 
er  end  solution  first.  We  were  still 
fairly  cautious  and  experimental 
with  NetApp.  We  subsequently 
brought  a  couple  of  their  F740  filers 
and  tested  them  with  critical  con¬ 
cepts,  including  SnapCopy,  Snap- 
Mirror,  and  SnapRestore.  We  were 
also  concerned  about  the  ability  to 
take  four  Microsoft-standard  IBM, 
Compaq,  and  Dell  servers  and  con¬ 
solidate  them  into  the  NetApp  filers 
with  zero  impact  on  the  desktop.  But 
those  four  Microsoft  Windows  NT 
personalities  transferred  directly  to 
the  NetApp  filer  without  any  dis¬ 
ruption. 

Q:  Why’d  you  go  with  an  IP- 
based  solution  vs.  Fibre  Channel? 

Griffith:  What  it  came  down  to 
was  the  kind  of  access  we  wanted. 
For  us  and  our  particular  implemen 


tation.  Fibre  Channel  would  have 
been  overkill.  It  would  have  required 
us  to  redeploy  our  existing  network 
infrastructure.  We  got  our  filers 
wired  back  via  fiber-optic  communi¬ 
cations,  and  they  really  rock.  They  do 
everything  they  need  to  do  as  far  as 
average  file  access  for  the  average 
client  or  our  average  storage  solution. 

Q:  Some  companies  use  NAS  for 
database-centric  OLTP  applica¬ 
tions.  Would  you  consider  NAS  in 
this  environment? 

Griffith:  We  are  considering  it 
currently.  To  be  quite  frank,  one  of 
the  environments  we  have  that  is  still 
fairly  low-volume  in  terms  of  total 
storage,  but  which  contains  extreme¬ 
ly  critical  information,  is  an  applica¬ 
tion  we  call  CCI,  Color  Composition 
International.  CCI  is  huge  in  Europe, 
and  now  it  is  penetrating  the  States. 
It  is  basically  a  high-end  database 
content  management  system  that 
runs  on  an  RS/6000  over  [Serial  Stor¬ 
age  Architecture,  an  interface  that 
was  developed  by  IBM]  directly  to 
SSA  storage. 

The  direction  we’d  like  to  move 
w'ith  that  is  to  an  Oracle  database. 
We’d  like  to  move  that  content  -  the 
Oracle  database  engine  storage  com¬ 
ponent  -  to  NAS.  Our  issue  with  the 
database  world  is  not  speed,  but  la¬ 
tency.  Local  databases  and  other  ap¬ 
plications  get  finicky  about  timeouts 
and  other  situations.  We  haven’t 
done  this  yet,  but  I  know  it’s  in  line 
for  exploration  and  pioneering  some¬ 
time  this  year. 

Q:  Let’s  get  back  to  your  imple¬ 
mentation.  When  did  it  begin,  how 


long  did  it  take,  what  problems,  if 
any,  did  you  have  along  the  way, 
and  how  did  you  deal  with  them? 

Griffith:  There  were  a  couple  of 
speed  bumps  relating  to  code  issues 
that  we  encountered  when  we  rolled 
out  the  NetApp  F740s.  They  w'ere 
sporadically  crashing  for  no  apparent 
reason.  This  was  in  the  infancy  of  the 
rollout.  And  NetApp  was  responsive 
to  our  problem.  We  sent  the  debugs 
to  them,  and  they  did  the  debug 
analysis.  They  had  a  patch  out  for  it  in 
a  matter  of  48  hours. 

The  NetApp  implementation  itself 
went  flawlessly.  We  had  NetApp 
turned  up  in  a  half  hour  in  terms  of 
configuring  volume,  bringing  up 
Net  Virus  aliases  -  bringing  every¬ 
thing  online  and  patching  to  the  net 
work.  We  had  the  typical  migration 
pains  and  difficulty  associated  with 
cleaning  up  user  data  and  NTFS  per¬ 
missions.  But  that  was  no  different 
than  if  we  had  moved  from  one  NT 
box  on  to  another. 

Q:  Would  you  characterize  the 
F740  filers  as  a  pilot? 

Griffith:  Effectively.  A  pilot  in 
terms  of  looking  at  the  NetApp  tech¬ 
nology  and  concepts  associated  with 
it  before  we  invested  significantly  in 
the  pair  of  F840  clusters  we  now  have 
that  top  out  at  12  terabytes.  I  think 
we  had  F740s  four  to  six  months  be 
fore  we  jumped  directly  to  the  F840s. 

Q:  What’s  the  current  status  of 
the  system? 

Griffith:  The  F840s  are  up,  run 
ning,  and  doing  what  we  need  them 
to  do.  In  fact,  we’re  getting  ready  to 
expand  them.  USA  Today's  Dot.com 


Computerworld  Custom  Publishing  /  USER  SURVIVAL  GUIDE  TO  NETWORK  STORAGE  MANAGEMENT 


SPECIAL  ADVERTISING  SUPPLEMENT 


online  product  is  about  to  requisition 
a  terabyte  of  storage  for  all  their  in 
ternal  olfice  automation,  standard 
file,  Microsoft-standard  desktop  ap¬ 
plications  storage.  We’re  also  looking 
to  expand  our  core  storage  in  our 
McLean  headquarters  to  support  a 
very  high  availability  FTP  solution. 

Q:  How  easy  is  this  system  to 
monitor? 

Griffith:  Very  easy.  In  fact,  so  easy, 
it’s  a  bit  freaky.  We  no  longer  have  to 
reactivcly  manage  all  our  storage. 
When  I  say  “kind  of  freaky,”  it’s  be¬ 
cause  now  only  two  of  us  are  re¬ 
quired  to  monitor  the  NetApp  solu¬ 
tion,  and  it  works  so  well  that  some 
times  we  forget  about  it.  It  just  stays 
in  the  background  and  does  what  it 
needs  to  do.  Each  week,  it  posts  a 
bunch  of  reports  based  on  stats,  us¬ 
age,  utilization,  things  like  that. 

Of  course,  there’s  a  maintenance 
agreement  which  brings  a  NetApp 
engineer  assigned  to  the  USA  Today 
account  once  a  month  to  do  a  com 
plete  top- to  bottom  health  status, 
which  includes  checking  on  the  fil 
ers.  Basically,  to  be  quite  candid,  all  of 
our  reactive  storage  management  has 
pretty  much  been  eliminated. 

Q:  Did  you  use  an  integrator  or 
consultant  in  the  course  of  this  im¬ 
plementation,  or  did  you  do  it  all 
internally? 

Griffith:  We  winged  it.  We  did  a 
lot  of  research  and,  quite  honestly, 
NetApp  worked  very  well  for  what 
we  needed.  We  did  not  have  to  get  a 
storage  integrator.  We  understood 
enough  about  our  landscape,  our  pro¬ 
duction  environment,  our  editorial 


environment,  and  our  standard  office 
automation  environment  that  we 
were  able  to  cobble  it  all  together  and 
architect  this  thing  ourselves. 

Q:  What  are  the  primary  bene¬ 
fits  you’ve  realized  as  a  result  of 
this  NetApp  solution? 

Griffith:  First  and  foremost,  rc 
dundancy  of  information  for  the  dis¬ 
aster  recovery  scenario.  On  Septem 
ber  11,  we  nearly  had  to  implement 
the  NetApp  filer  in  terms  of  disaster- 
recovery  functionality.  Our  old  head¬ 
quarters  were  right  across  the  bridge 
from  Washington,  D.C.,  on  the  Po¬ 
tomac  River  and  along  the  flight  path 
of  National  Airport.  The  point  where 
the  Pentagon  was  hit  by  the  plane 
was  approximately  in  the  flight  tra¬ 
jectory  of  our  headquarters.  We 
could  see  the  Pentagon  burning  from 
our  building. 

There  was  obviously  a  great  deal  of 
chaos  that  day.  At  one  point,  all  of  the 
technical  staff  had  moved  to  the 
White  Oak,  Md.,  location  and  had 
begun  bringing  all  our  backup  sys¬ 
tems  on  line.  We  had  the  peace  of 
mind  that  comes  from  knowing  that 
the  3  terabytes  we  had  online  were 
replicated  over  to  White  Oak.  With 
just  a  couple  of  command  lines,  we 
could  resurrect  the  personalities  of 
all  the  NFS  and  Microsoft  servers  on 
that  network  from  McLean.  As  you 
might  imagine,  business  continuity 
w'as  very  important.  So  the  primary 
benefit  we  realized  from  the  NetApp 
solution  was  data  availability. 

Q:  What  other  benefits  were 
there? 

Griflith:  I  w'ould  say  our  ability  to  i 


extend  and  expand  data  with  mini 
mal,  if  any,  impact  to  the  production 
and  operational  status  of  our  busi 
ness.  That’s  a  major  benefit.  We  can 
basically  expand  and  extend  the 
function  of  these  NetApp  files  while 
having  very  little  impact  on  the  client 
side.  It  is  done  transparently  in  the 
background;  I  really  have  little  to  do 
with  the  desktop  side  of  it,  but  it’s 
very  significant  that  we  can  go  out, 
grab  a  file  for  a  user,  and  restore  it  in  a 
matter  of  minutes,  as  opposed  to  an 
hour.  And  multi- protocol  support  is 
a  huge  advantage  for  us,  because 
we’re  as  much  a  Unix  shop  as  w'e  are  a 
Microsoft  shop  -  we  talk  NFS,  FTP, 
CIFS-you  name  it. 

Q:  Was  one  of  your  goals  to  real¬ 
ize  a  hard-dollar  return  on  invest¬ 
ment  with  this?  And  if  so,  have  you 
done  that? 

Griffith:  We  have  not  done  a  for¬ 
mal  calculation  on  ROl  with  this  par¬ 
ticular  project,  but  I  can  tell  you 
anecdotally  that  it’s  beginning  to  pay 
off  in  a  big  w'ay.  The  initial  invest 
ment  is  done,  and  we’re  scaling  this 
existing  technology.  It  used  to  be  w'e 
had  entire  operations  departments 
managing  banks  of  servers  for  storage 
that  had  been  spread  across  dozens 
of  NT  file  servers,  including  at  least 
four  or  five  critical  key  servers.  Now', 
that’s  all  been  consolidated  and  re¬ 
duced  into  a  NetApp  cluster. 

So  there  is  no  hard  ROI  value  or  as¬ 
sessment  that  W'e’ve  done.  However, 
the  value  we’ve  gained  has  been  very 
clear  and  tangible.  We’re  definitely 
getting  a  return  on  our  NetApp  in 
vestment  even  as  we  continue  to  ex¬ 
tend  and  expand  it.# 
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It's  the  automated  array  and  all  of  its  cost-saving  features. 
HP's  Virtual  Arrays  save  you  money  by  automating  the  manual 
processes  required  in  traditional  arrays.  Tuning  out  hot  spots, 
adding  storage  space  and  protecting  your  data — automatically 
Freeing  your  valuable  IT  resources  and  taking  the  mystery  out  of 
efficient  data  management. 

[  Hurry,  and  request  your  free  copy  of  the 

HP  Virtual  Array:  Double  Your  Operating  Efficiency  guide 
now,  visit  www.hp.com/info/virtualarray  ] 
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new  opportunities  elsewhere. 

To  forestall  these  problems,  man¬ 
agers  should  do  three  things:  make 
themselves  available  to  current  em¬ 
ployees,  articulate  ways  IT  can  support 
business  units  and  introduce  basic 
features  to  save  their  employees  time 
and  money. 

“Before  and  after  cutbacks,  managers 
tend  to  disappear,”  says  Moravec. 
“That’s  the  wrong  thing  to  do.”  He  also 
recommends  cutting  your  travel  to  be 
close  to  workers.  “You  need  to  be  will¬ 
ing  to  listen  and  show  courage  during 
times  of  corporate  stress,”  he  says. 

To  hold  on  to  current  personnel, 
you  should  introduce  ways  to  make 
life  better  for  survivors.  This  is  seldom 
easy,  especially  when  budgets  are 
crimped.  But  there  are  some  simple 
programs  that  make  good  business 
sense  and  will  make  life  better  for  peo¬ 
ple  in  your  downsized  organization. 

For  example,  Cisco  Systems  put 
employee  relationship  management 
applications  on  the  desktop  to  auto¬ 
mate  expense  reporting  for  its  workers 
in  28  countries.  Based  on  business 
policies,  about  25,000  expense  reports 
are  filled  out  using  a  Java  thin  client 
every  month.  Employees  are  reim¬ 
bursed  via  direct  deposit.  Managers 
save  time,  trust  is  built,  and  employees 
no  longer  loan  money  to  the  company 
by  procrastinating  on  Filing  paper  re¬ 
ports. 

This  way,  at  least  all  the  memories 
won’t  be  horrible.  > 

THORNTON  MAY 

IT’s  Role  in 
Protecting 
Digital  Assets 

SEVERAL  YEARS  AGO,  as 
the  Internet  bubble  was 
reaching  its  maximum 
circumference,  a  cashed-out 
colleague  delivered  this  un- 

asked-for  assessment  of  my  career 
trajectory: 

“For  a  smart  guy,  you  really  aren’t  all 
ihat  successful.” 

“What  do  you  mean?”  I  asked. 

“You  don’t  have  that  many  people 
reporting  to  you,”  he  explained. 

The  comment  from  my  “career 
counselor”  came  out  of  the  Industrial 
g  Age,  which  was  somewhat  marked  by 
I  whether  you  could  “manage”  the  re- 
■  sources  —  in  this  case,  workers  —  that 


made  the  factory  run.  But 
today,  in  the  Information 
Age,  career  success  will  be 
marked  by  what  we  can  get 
from  information:  Will  you 
be  able  to  create,  distribute 
and  obtain  value  from 
ideas? 

Everyone  knows  that 
profitability  is  no  longer 
solely  a  result  of  the  facto¬ 
ries  a  company  operates  or 
the  raw  materials  it  extracts. 

As  Seth  Godin,  co-author  of 
Unleashing  the  Ideavirus 
(Hyperion,  2001),  explains: 

“We’re  shipping  ideas,  not  stuff.” 

That  brings  us  to  the  topic  of  intellec¬ 
tual  property.  The  world  has  changed 
so  much  that  intellectual  property  is 
the  most  important  source  of  value  in 
the  Information  Age  economy.  But 
what  many  IT  leaders  don’t  appreciate 
is  that  intellectual  property  is  a  true 
game-changer.  Our  craft  will  never  be 
the  same.  So,  IT  leaders  face  the  fol¬ 
lowing  five  roles  as  they  prepare  for 
this  new  world: 

■  The  first  and  most  basic  IT  role  in 
an  economy  driven  by  intellectual 


property  is  its  distribution. 
We  have  to  build  and  main¬ 
tain  the  roads  that  carry 
ideas.  We  have  been  pretty 
good  at  building  those 
roads.  But  the  jury  is  out 
regarding  the  kind  of  job 
we’re  doing  of  maintaining 
them. 

■  The  second  is  protect¬ 
ing  intellectual  property. 
Currently,  3%  to  4%  of  the 
IT  budget  is  devoted  to 
digital  security.  But  compa¬ 
nies  that  understand  the 
importance  of  intellectual 
property  are  tripling  this  allocation. 

This  might  have  been  a  style  point 
when  we  were  blasting  only  data 
around  the  network.  But  now  that 
we’re  moving  intellectual  property,  the 
stakes  have  risen.  Executives  are  ask¬ 
ing  IT  leaders,  “Can  you  protect  our 
intellectual  property?  If  we  put  the 
digital  source  of  our  economic  advan¬ 
tage  on  the  cyberroad  you  have  built, 
will  we  be  safe  from  carjackers  and 
drive-by  defacers?”  Have  any  of  you 
responded,  “Yes,  I  guarantee  your 
intellectual  property  will  be  safe”? 


Have  any  of  you  put  a  hard  and  fast 
date  on  when  you  can  guarantee  the 
safety  of  intellectual  property?  Today’s 
threats  may  not  match  the  organiza¬ 
tions  or  skill  sets  we  have  in  place.  So, 
we  must  change  those  organizations 
and  upgrade  those  skill  sets. 

An  interim  step  might  be  to  ask 
users  to  play  a  much  larger  role  in 
protecting  intellectual  property.  There 
can  be  little  argument  that  the  digital 
world  would  be  much  improved  if  all 
senior  executives  were  required  to 
enroll  in  some  kind  of  information 
protection  program.  And  we  must  hold 
each  employee  responsible  for  protect¬ 
ing  intellectual  property.  But  this  will 
be  difficult  because  many  executives 
lack  a  digital  common  sense. 

■  The  final  three  roles  of  the  IT 
leader  in  intellectual  property  will  be 
in  merchandising  (arranging  the  ideas 
to  be  sold),  pricing  (establishing  fees 
to  pay  for  the  ideas)  and  the  collection 
of  rent. 

These  last  three  shouldn’t  be  too 
hard;  it’s  where  the  dot-comers  began 
their  adventure.  And  maybe  you  can 
hire  one  to  fill  those  roles  —  and  he 
can  report  to  you.  I 
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Secure  Remote  Access  Requires  More  Than  Tokens 


he  remote  access 
needs  of  Mathias 
Thurman’s  technical 
staff  and  the  authentication 
needs  of  his  company  can 
both  be  met,  but  not  solely 
with  the  use  of  tokens 
[“Authentication  Rollout 
Turns  Into  Control  Issue,” 
Security  Manager’s  Journal, 
March  4].  A  VPN  tunnel  in 
conjunction  with  one-time 
token  authentication  can 
give  his  staff  secure  access 
into  their  network. 

If  necessary,  Mathias  can 
distinguish  his  technical 
staff  by  using  network  ad¬ 
dress  translation.  Various 
methods  could  then  be  used 
to  bypass  the  token  authen¬ 
tication  on  each  server  just 
for  his  technical  staff.  Also 
note  that  some  token  solu¬ 
tions  can  be  designed  to  au¬ 
tomate  the  sign-in  process. 
Jon  Soller 
Network  architect 
State  of  New  Hampshire 
Concord 


F  MATHIAS  THURMAN  IS 
letting  management 
force  him  into  the  posi¬ 
tion  of  making  decisions 
“that  may  be  perceived  as 
impeding  the  company’s 
business  and  operations,” 
sooner  or  later,  he  will  get 
into  trouble. 

He  should  be  doing  what 
the  rest  of  his  column 
appears  to  be  depicting  — 
that  is,  doing  the  research, 
identifying  the  pros  and 
cons  and  making  recom¬ 
mendations.  Then  a  busi¬ 
ness-line  executive  should 
be  making  the  decision. 

Thurman  appears  to  have 
a  good  feeling  for  his  com¬ 
pany’s  business  operations, 
and  that’s  good,  but  it  isn’t 
enough. 

Someone  on  the  security 
team  should  have  the 
explicit  responsibility  of 
understanding  the  business 
well  enough  to  make  esti¬ 
mates,  such  as  the  $5,000 
per  minute  of  lost  business 


cited  in  the  article,  with 
credibility. 

Thurman  can,  and  should, 
design,  define  and  recom¬ 
mend  policy  options.  The 
executive  suite  should  be 
deciding  which  options  to 
implement. 

William  Zdankiewicz  Jr. 

Senior  IT  specialist 
Mechanicsburg,  Pa. 

Good  Vendors  Aren't 
Negotiation  Adversaries 

I  read  with  interest  Joe 
Auer’s  “One  Bite  at  a 
Time”  article  [Business, 
March  11],  His  advice 
assumes  an  adversarial 
relationship  with  the  ven¬ 
dor,  with  one  side  being  the 
clear  winner  and  the  other 
the  loser. 

I  would  insist  that  good 
vendors  seek  to  establish 
win/win  relationships  with 
clients  that  foster  teamwork 
and  consensus-building. 

Furthermore,  if  the  ven¬ 
dor  isn’t  made  aware  of  the 


project’s  overall  objectives, 
there’s  a  high  likelihood  that 
the  limited  functional  speci¬ 
fications  negotiated  won’t 
address  downstream  re¬ 
quirements. 

This  often  results  in  time- 
consuming  and  expensive 
rework,  finger-pointing  and 
dissatisfaction. 

John  Dolezal 

Director  of  sales  and  marketing 
Interact  Multimedia 
Mishawaka,  Ind. 
johnd@interactmultimedia.com 
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As  scientists  race  to  crack  the 
human  genome  to  help  develop 
a  new  generation  of  life-saving 
drugs,  the  biotechnology  industry 
is  hungry  for  IT  professionals 
with  experience  in  Java,  C++  and 
other  areas  to  support  these  data- 
intensive  efforts.  PAGE  28 
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re-engineering 
mantra,  while 
the  second  book 
explores  the 
impact  the  Inter¬ 
net  is  having  on 
'  how  managers 
run  their  organi¬ 
zations.  The  third 
book  examines  the  strategies  that 
Larry  Ellison  has  deployed  to  make 
Oracle  so  successful,  and  the  fourth 
offers  advice  on  how  to  solve  your 
workplace’s  intergenerational 
puzzle.  PAGE  34 
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Adopters  of  videoconferencing 
have  seen  strong  returns  on  their 
investments:  They  say  these  sys¬ 
tems  help  reduce  travel  costs  and 
have  provided  an  alternative  to 
flying  for  employees  who  have 
been  nervous  about  taking  to  the 
skies  since  the  Sept.  11  terrorist 
attacks.  PAGE  36 
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Fran  Quittel  offers  advice  to  two 
mainframe  professionals  who  have 
decidedly  different  slants  on  the 
current  job  market  for  big-iron 
experts.  PAGE  38 
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‘Tail’  Over  ‘Teeth  ? 


HE  “TAIL-TO-TOOTH”  RATIO  is  a  favorite  measure  of  the 
Marine  Corps.  It  defines  teeth  as  whatever  delivers  combat 
power.  Tail  is  everything  else,  such  as  support  staffs  and  the 
Pentagon-based  command.  The  corporate  tail-to-tooth  ratio, 
which  I  have  been  watching  for  more  than  20  years,  is  defined 


as  the  cost  of  sales,  general  and  administrative  ex¬ 
penses  to  the  cost  of  goods  sold.  It  can  give  you  a 
good  idea  how  much  overhead  (which  economists 
define  as  “transaction  costs”)  is  necessary  to  support 
the  delivery  of  a  dollar’s  worth  of  goods  and  services. 

What’s  embedded  in  the  cost  of  goods  sold  is  what 
customers  recognize  as  the  value  they  receive.  Cus¬ 
tomers  don’t  care  how  much  a  corporation  spends  on 
accountants,  personnel  administration,  advertising, 
lawyers,  computers  or  executives.  But  IT  executives 
should  care  greatly,  because  consultants,  IT  vendors 
and  most  government  economists  have  long  assumed 
that  the  more  IT  you  have,  the  lower  the  transaction 
costs.  Computerization,  they  claim,  accelerates  com¬ 
munication,  simplifies  workflow,  automates  clerical 
tasks,  delivers  improved  intelligence,  eliminates  re¬ 
dundancies  and  helps  integrate  diverse  activities.  In 
short,  the  biggest  benefits  are  lower  transaction  costs. 
So  the  tail-to-tooth  ratio  should  be  declining. 

As  I’ve  said  before,  those  claims  are  myths.  Yet  their 
persistence  bothers  me. 

I  used  the  latest  compilation  of  year  2000  annual 
reports  by  Compustat  to  examine  financial  results.  I 
focused  on  recent  trends  in  corporate  costs  while 
companies  were  installing  computers  at  a  rate  that 
was  growing  more  than  three  times  as  fast  as  spend¬ 
ing  on  all  other  business  equipment.  In  effect,  corpo¬ 
rations  were  placing  larger  bets  on  the  prospective 
payoffs  from  computers  than  on  investments  in  any 
other  means  of  production  [Business  Opinion,  April  9, 
2001].  When  corporations  proposed  investments  in 
IT,  reductions  in  transaction  costs  always  showed  up 
in  projections  of  “tangible”  gains.  But  from  the  accom¬ 
panying  chart  based  on  the  Compustat  data,  we  can 
examine  the  evidence  of  what  more  than  a  decade  of 
exuberant  IT  spending  has  delivered. 

The  steady  gain  in  the  average  transaction  expenses 
necessary  to  support  the  costs  of  goods  and  services 
caused  U.S.  firms  to  spend  $273  billion  more  in  trans¬ 
action  expenses  in  2000,  or  14%  more  than  indicated 
by  the  ratio  that  worked  for  the  firms  in  1990  ($1.91 
billion  vs.  $1.64  billion).  This  estimate  offers  the  most 
optimistic  interpretation  of  what  the  additional  costs 
were.  If  identical  calculations  were  based  on  the  me¬ 
dian  ratio  of  transaction  costs  to  the  cost  of  goods  — 


which  offers  a  more  conservative  view  of  the  situation 
—  that  rise  would  have  been  slightly  more  than  dou¬ 
ble  that  percentage.  The  chief  reason  for  the  large  gains 
in  added  costs  is  a  rise  in  pay  in  the  financial  services 
sector,  where  computerization  was  most  pervasive  and 
consumes  about  one-third  of  all  IT  in  the  U.S.  economy. 

Implications:  The  past  two  decades  saw  the  installa¬ 
tion  of  costly  information  management  systems  that 
promised  reductions  in  transaction  costs.  But  the 
numbers  disprove  such  assumptions.  The  trend  in 
transaction  costs  is  a  telling  indicator  that  will  help 
validate  the  long-term  effectiveness  of  IT  investments 
[Business  Opinion,  Jan.  7].  Given  the  increased  pres¬ 
sure  to  justify  IT  payoffs,  this  metric  offers  evidence 
that  IT  investments  haven’t  improved  corporate  effi¬ 
ciency,  since  these  numbers  can  be  linked  to  financial 
statements  on  which  shareholders,  financial  analysts 
and  boards  of  directors  rely.  What  counts  today  is 
what  benefits  shareholders.  The  prescription  for  that? 
Create  a  trim  organization  that  can  make  itself  more 
competitive  by  reducing  transaction  costs.  • 


In  a  follow-up  column,  Strassmann  will  examine  a 
frequently  used  and  misleading  metric:  the  IT  budget- 
to-corporate  revenue  ratio.  Contact  him  at  paul@ 
strassmann.com. 


Tail-to-Tooth  Ratio  on  the  Rise 

The  ratio  of  average  transaction  costs  to  the  costs  of 
goods  sold  has  risen  from  26%  to  30%  since  1990. 
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6.603  U.S  CORPORATIONS  WITH  TOTAL  COST  OF  GOODS  IN  2000  OF  S6  3  TRILLION 
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When  bankrupt  Exodus  Communi¬ 
cations  Inc.  began  asset  acquisi¬ 
tion  proceedings  with  London- 
based  Cable  &  Wireless  PLC  in 
February,  Exodus’  chief  security 
officer  arrived  at  the  first  meeting 
carrying  a  700-page  dossier  on  Cable  &  Wireless. 

All  of  this  information  was  gathered  from  open 
sources  on  the  Internet. 

“I  was  able  to  put  together  Cable  &  Wireless’  ser¬ 
vice,  personnel,  structure,  revenues,  customer  base 
and  much  more,”  says  Bill  Hancock,  Exodus’  chief 
security  officer.  “[Cable  &  Wireless  executives] 
were  stunned  that  I  knew  so  much  about  them,  but 
I  do  this  type  of  research  all  the  time  on  prospec¬ 
tive  clients.” 

Chances  are,  bits  and  pieces  of  your  company’s 
intellectual  property  are  floating  around  cyber¬ 
space.  A  corporate  Web  site  is  a  virtual  gold  mine 
for  competitive  intelligence  gatherers.  Also,  partner 
and  vendor  links  can  provide  clues  to  product  de¬ 
velopment  plans.  Job  postings  can  tip  off  regional 
expansion  plans.  And  employees  can  leak  strategic 
information  on  discussion  boards  and  chat  groups. 

“Corporate  Web  sites  contain  a  tremendous 
amount  of  information  about  corporate  strategies, 
plans  and  personnel,”  says  Richard  Hunter,  vice 
president  of  security  research  at  Gartner  Inc.  in 
Stamford,  Conn. 

For  the  most  part,  businesses  haven’t  caught  on 
to  the  ubiquity  of  Internet-posted  material,  nor 
have  they  developed  policies  to  manage  this  infor¬ 
mation,  says  Eduard  L.  Telders,  security  manager  at 
Pemco  Financial  Services  in  Seattle.  Because  of  the 
Internet,  he  adds,  “there’s  been  a  virtual  explosion 
of  competitive  intelligence”  available  for  digital  de¬ 
tectives  to  gather. 

For  example,  instead  of  searching  through  data¬ 
bases  and  analyst  reports,  a  good  competitive  intel¬ 
ligence  investigator  can  easily  find  product  devel¬ 
opment  information  by  seeing  who’s  linking  to  your 
site.  Sometimes,  those  links  lead  right  back  to  sup¬ 
plier  testimonials  that  offer  way  too  much  informa¬ 
tion  about  your  business. 

“In  some  cases,  you’ll  see  descriptions  and  case 
studies  about  how  they  redesigned  your  plant  — 
stuff  you’d  be  shocked  to  read,”  says  John  Jay  Mc- 
Gonagle,  co-author  of  seven  books  on  competitive 
intelligence  and  managing  partner  of  The  Helicon 
Group  in  Blandon,  Pa. 

While  competitive  intelligence  still  requires  good 
old-fashioned  gumshoe  work,  the  Internet  now  pro¬ 
vides  the  best  jumping-off  point,  according  to  Mc- 
Gonagle  and  other  experts.  And  in  some  cases,  the 
Internet  can  yield  the  bulk  of  information  needed 
to  influence  competitive  strategies. 

To  highlight  the  many  ways  the  Internet  makes 
information-gathering  easier  and  to  offer  IT  profes¬ 
sionals  steps  they  can  take  to  better  protect  corpo¬ 
rate  data,  McGonagle  offers  the  following  case 
studies  from  his  work  with  real  clients  during  the 
past  two  years.  Corporate  identities  have  been 
omitted  for  confidentiality  reasons. 
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Corporate  Web  sites  are  a  virtual  gold  mine 

for  competitive  intelligence  excavators. 

Is  your  company  posting  too  much 

information  online?  by  deborah  radcuff 
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Handle  With  Care 


Each  time  content  is  added  to  a  corporate  Web 
site,  it  should  first  be  viewed  by  representatives 
from  the  legal,  human  resources,  marketing,  IT 
and  business  units,  says  Eduard  L.  Telders,  securi¬ 
ty  manager  at  Pemco  Financial  Services. 

Telders  and  Richard  Wilhelm,  a  former  CIA 
agent  and  vice  president  of  national  security  at 
Booze-Alien  &  Hamilton  Inc.  in  McLean,  Va.,  say 
businesses  should  take  extra  caution  with  the  fol¬ 
lowing  types  of  information: 


o  Physical  layout,  floor  plans 


ana  plant  structures 


O 


Details  of  network 
infrastructure 


O 


Detailed  customer  and 
supply  chain  elements 


0  Employee  names,  pictures 
and  orqani 


organizational  charts 


O 


Executive  travel  schedules 
and  personal  information 


Purchases  and  hiring 
for  special  projects 


O  Research  and  development 
O  Manufacturing  processes 


In  addition,  they  say,  review  your  HTML  source 
code  for  explanatory  data  leaks  and  look  for  obso¬ 
lete  Web  pages  still  mounted  to  your  site. 


-  Deborah  Radcliff 


For  tips  on  how  to  guard  sensitive  data 
revealed  by  links  with  partners  and  suppliers 
and  how  to  protect  corporate  information 
from  being  dispersed  in  chat  rooms,  go  to: 


www.computerworld.com/q?28052 

www.computerworid.com/q728053 


THE  PHANTOM  WEB  SITE 

A  financial  services  firm  (Bank  A)  heard  that  a 
competitor  (Bank  B)  might  be  entering  Bank  A’s 
unique  employee  benefits  market  niche.  Bank  A’s 
CEO,  who  heard  that  Bank  B’s  code  name  for  the 
project  was  Modern  Garden,  was  especially  con¬ 
cerned  because  Bank  A  had  recently  lost  two  employ¬ 
ees  from  its  employee  benefits  branch  to  Bank  B. 

Bank  A  hired  hired  McGonagle  to  investigate  the 
situation. 

He  first  searched  Bank  B’s  Web 
page  and  found  nothing.  So  he 
went  to  the  Marina  Del  Rey, 

Calif. -based  Internet  Corporation 
for  Assigned  Names  and  Num¬ 
bers’  Web  site  at  www.internic. 
com,  and  typed  in  “Modern  Gar¬ 
den.”  Moderngarden.org  and 
moderngarden.net  were  available 
for  sale.  Moderngarden.com  was  not  available  for 
sale,  meaning  it  was  already  taken. 

But,  interestingly,  Moderngarden.com  didn’t  show 
up  as  an  existing  Internic  address  either,  meaning 
search  engines  wouldn’t  be  able  to  locate  it.  “It’s  im¬ 
portant  to  look  at  what’s  missing,”  his  partner  told 
him  and  typed  “Moderngarden.com”  into  a  browser. 
Up  popped  a  Web  page  with  Bank  B’s  logo  on  it. 

The  secret  page  had  a  wealth  of  information:  the 
new  project  statement,  positioning,  launch  date,  mar¬ 
keting  channels  —  along  with  the  names  and  phone 
numbers  of  those  working  on  the  new  offering.  Two 
of  those  workers  were  the  former  Bank  A  employees. 

Lessons  learned:  This  information  helped  Bank  A 
prepare  for  the  oncoming  assault  from  its  competi¬ 
tor,  says  McGonagle.  Those  testing  the  Web  site 
shouldn’t  have  used  the  corporate  logo.  Nor  should 
they  have  put  that  site  on  the  public  Web  until  its 
formal  launch,  McGonagle  says.  If  it  was  crucial  to 
test  the  page  on  the  World  Wide  Web,  then  Bank  B 
should  have  assigned  it  space  that  doesn’t  carry  the 
Web  address  and  instead  should  have  asked  adminis¬ 
trators  to  reach  it  directly  through  an  IP  address. 

THE  ROGUE  RESUME  LINK 

A  software  company  (Company  X)  was  touting  a 
new  Web-based  platform  that  sounded  impossible  to 
Company  X’s  competitor,  which  was  a  year  away 
from  releasing  a  similar  application.  The  competitor 
wanted  to  know  if  X’s  technology  was  truly  ready. 

McGonagle  couldn’t  find  any  obvious  sources  of 
information  on  Company  X’s  Web  site,  so  he  decided 
to  find  out  who  was  linking  to  it.  He  did  so  by  using 
Palo  Alto,  Calif.-based  AltaVista  Co.’s  search  engine 
at  www.altavista.com  and  typing  in  “link:www.Com- 
panyX.com.” 

He  found  a  resume  linked  to  Company  X.  Clicking 
on  the  link,  McGonagle  saw  that  the  resume  be¬ 
longed  to  a  Java  development  consultant  claiming  to 
have  worked  on  Company  X’s  new  Web  platform. 

The  discovery  helped  McGonagle  link  the  Java  de¬ 
velopment  consultant  to  the  first  half  of  the  project.  A 
telephone  call  to  the  developer  confirmed  that  he  had, 


indeed,  worked  on  the  early  portion  of  the  project. 

Next,  McGonagle  needed  to  find  out  who  was  fin¬ 
ishing  it.  So  he  visited  the  Web  pages  of  contracting 
firms  specializing  in  this  type  of  technology  and 
searched  for  Company  X’s  name.  He  found  Company 
X’s  name  on  the  customer  list  at  one  of  the  firms  and 
then  telephoned  the  project  consultant  who’d  linked 
his  resume  to  Company  X’s  Web  page. 

“We  asked  the  developer  if  he  knew  anything 
about  the  contracting  firm  we’d  identified.  We  asked 
if  their  work  would  fit  with  the 
work  he’d  already  done  on  the 
project,”  says  McGonagle.  “The 
developer  said  he  knew  of  the  type 
of  work  the  new  contractor  did 
and  that  it  wouldn’t  fit  very  well. 
He  said  the  product,  if  delivered 
on  schedule,  would  be  full  of  bugs. 
So  our  client  knew  that  they  could 
advertise  that  their  product  took 
longer  because  it’s  superior.” 

Lessons  learned:  Company  X  should  have  checked 
who  was  linking  to  it  the  same  way  McGonagle  did, 
something  every  business  should  do  periodically,  he 
says.  Companies  should  also  visit  the  Web  sites  of  their 
suppliers  and  contractors  that  aren’t  linking  to  them 
and  see  who’s  mentioning  them  on  their  Web  pages. 

JOB  BOARD  TIP-OFFS 

A  chain  retailer  was  aware  that  its  most  staunch 
competitor  was  expanding.  The  retailer  wanted  to 
know  how  many  new  stores  and  distribution  centers 
were  in  the  works  and  how  much  the  competitor  was 
planning  to  spend  on  logistics. 

Knowing  that  new  stores  need  staffing,  McGonagle 
started  searching  on  job  boards  like  HotJobs.com  and 
Monster.com.  “The  advertisements  gave  away  far  too 
much  information  —  where  they’re  expanding  to, 
supply  chain  and  management  methodologies, 
growth  target,”  he  says.  “This  information,  combined 
with  other  research  [including  a  review  of  zoning  ap¬ 
plications  and  calls  to  securities  analysts]  helped  us 
to  determine  their  logistics  spending.” 

Lessons  learned:  The  expanding  retailer  shouldn’t 
have  put  so  much  information  in  its  job  postings, 
McGonagle  says.  Instead,  it  should  have  published 
something  vague,  like  “We’re  an  aggressive,  expand¬ 
ing  company,”  and  saved  the  details  for  interviews. 

Preventive  measures  like  these  should  be  part  of 
any  company’s  data  handling  policy,  say  Telders  and 
Hancock  (see  box).  Adds  Telders,  “Before  your  com¬ 
pany  puts  anything  on  the  Web,  ask  yourself,  ‘Is  this 
is  something  that  our  company  would  want  for  pub¬ 
lic  viewing?’  ”  > 

Oi  liz-Jz'  Gathering  competitive  intelligence  involves  widely 
WLllCK  available  search  engines.  But  to  analyze  the  information. 

experts  turn  to  a  cadre  of  specialized  data  analysis  and 
1  Jl  organizational  tools.  To  find  out  more,  go  to: 

www.computerworid.com/q?28051 

There’s  another  intellectual  property  threat  made  worse  by  the  Internet. 
Names,  logos  and  copyrights  are  being  abused  by  bulk  e-mailers  and 
pornographers  bent  on  driving  traffic  to  their  sites.  For  steps  on  how  to 
protect  your  organization’s  intellectual  property,  go  to: 

www.computerworld.co  m/q?28054 


In  some  cases,  you’ll 
see  descriptions  and 
case  studies  about 
how  [a  supplier] 
redesigned  your  plant  -  stuff  you’d 
be  shocked  to  read. 

-  John  Jay  McGonagle,  managing 
partner,  The  Helicon  Group 
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TILL  YEARNING  FOR 

the  dot-com  days, 
when  IT  skills  were 
not  only  critical  but 
also  sexy?  Wishing 
for  a  time  when  you 
could  come  to  work 
with  a  credible  chance  of  helping  to 
change  the  world  every  day? 

Take  heart.  There’s  still  at  least  one 
industry  in  which  advanced  IT  is  so 
vital  that  without  it,  companies  literal¬ 
ly  can’t  compete.  With  the  right  combi¬ 
nation  of  technology,  science  and  luck, 
such  firms  stand  to  be 
not  only  competitive, 
but  also  incredibly 
profitable  while  indeed  changing  the 
world  —  or  at  least  curing  disease  and 
improving  the  human  condition. 

Pretty  high  concept,  but  that’s  the 
whole  point  behind  biotechnology,  an 
industry  that’s  using  the  recently  de¬ 
coded  human  genome  as  a  set  of  in¬ 
structions  for  how  to  design  drugs  to 
treat  cancer,  diabetes,  depression  and 
dozens  of  other  physical  and  mental 
maladies. 

“A  lot  of  it  involves  straight  IT  skills, 
but  in  the  end,  what  you’re  trying  to  do 
is  pretty  significant,”  says  Paul  Dupuis, 
who  has  a  background  in  mainstream 
IT  and  a  talent  for  understatement.  He 
is  director  of  IT  at  Vertex  Pharmaceu¬ 
ticals  Inc.  in  Cambridge,  Mass. 


Gaining  Ground 

Leveraging  IT  to  help  read  the  hu¬ 
man  genome  and  design  compounds 
according  to  its  instructions  could  cut 
two  to  three  years  off  the  15  it  currently 
takes  to  develop  a  single  new  drug.  It 
could  also  slice  the  average  $880  mil¬ 
lion  price  tag  for  drug  development  in 
half,  according  to  a  report  from  The 
Boston  Consulting  Group  Inc. 

Advances  in  homegrown  and  com¬ 
mercial  informatics  are  making  the 
decoding  process  easier,  but  the  data 
is  growing  faster  than  the  technology 
used  to  analyze  it. 

“A  year  or  two  ago,  we  were  all  very 
focused  on  sequencing  genes,  figuring 
out  how  they  assemble  together  into 
chromosomes,  which  10  years  ago 
seemed  like  a  phenomenal  project,” 
says  George  Morris,  director  of  bio¬ 
informatics  at  drug  development  firm 
Zycos  Inc.  in  Lexington,  Mass. 

'Now  we’re  interested  in  proteomics 
investigating  the  proteins  that  genes 
code  for  —  and  they’re  much  more 
.  mplicated,”  Morris  says.  “There’s  a 
■n  to-one  relationship  between  a 
.  •  t,-ia  and  a  gene,  and  many  different 
for:.. is  of  it.  There’s  a  huge  order  of  mag- 
Continued  on  page  32 


Scientists  lead  the  effort  to  squeeze  medical  solutions  from 
the  human  genome,  but  mainstream  IT  pros  provide  the  skills 
needed  to  make  it  happen.  By  Kevin  Fogarty 


When  choosing  a  technology  partner. _ 

there  are  many  things  to  look  for. 


Always  start  with  this. 


Microsoft 

CERTIFIED 

Partner 


The  above  logo  represents  the  pinnacle  of  business  technology  in  the 
world  today.  The  companies  that  bear  it  are  Microsoft  Certified  Partners, 
and  when  you  encounter  one,  you  encounter  a  professional  proven  to  be 
the  best  at  what  they  do.  They  have  the  most  certified  experts  on  staff, 
receiving  their  training,  support  and  tools  directly  from  Microsoft.  They 
have  the  broadest  range  of  experience,  having  expertise  in  areas  such  as 
networking,  infrastructure,  collaboration,  and  many  other  leading  disci¬ 
plines.  And  there’s  a  Microsoft  Certified  Partner  right  near  you.  To  find  one, 
go  to  http://mcspreferral.microsoft.com/ 
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There's  a  Dell  PowerEdge  server 
for  every  kind  of  business. 

From  "kind  of  start  up"  to  "kind  of  FORTUNE  500.®" 
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I  No  matter  the  size  of  your  company,  we've  got  a  server  that  fits.  Dell  PowerEdge  servers  with  Windows®  2000  Server  have  many  amazing  "abilities": 

scalability,  availability,  manageability  and  serviceability.  So  they  grow  with  your  business,  minimize  downtime,  are  easy  to  integrate  and  even  easier  to  support.  f Y 
No  matter  what  your  business  needs  -  from  file/print  to  database  management  -  you  can  choose  the  Microsoft®  Windows®  2000  Server  operating  system  that 
is  right  for  you.  And,  by  dealing  directly  with  Dell,  you  get  a  system  customized  to  fit  your  business  needs,  at  an  affordable  price,  backed  by  our  award-winning 
service  and  support.  It's  a  nice  mix  of  exactly  the  server  you  need  and  exactly  the  operating  system  you  want. 


,% 


QuickLease" 

for  qualified  customers 


Dell  |  Small  Business 


PowerEdge™  1500SC  Server 


NEW  Simple  and  Strong  Server 

•  Inter  Pentium1  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM 

•  18GB5  (10K  RPM)  Ultra3  SCSI  Hard  Drive 

•  Embedded  Dual-Channel  Ultra3  SCSI  Controller 

•  Embedded  Gigabit  NIC 

•  1-Yr  Next  Business  Day  On-Site  Service,3 1-Yr  Limited  Parts 
Warranty,3 1-Yr  24x7  Dedicated  Server  Phone  Tech  Support 


$1299© 


QuickLoan:  $35/mo„  48  mos" 

E-VALUE  Code: 
11069-290312 


Recommended  upgrades: 

•  NEW  PowerConnect”  21 24*  24-Port  Unmanaged  Switch 
with  Gigabit  Port,  add  $299 

•  System  Including  Small  Business  Server  2000  and 
Memory  Upgrade  to  256MB  is  $2699 


Dell  Rated  #1  in  Intel  Server  Satisfaction 

Technology  Business  Research 
Corporate  IT  Buying  Behavior  and  Customer  Satisfaction  Study 

3rd  Quarter 
-  December  2001 


PowerEdge™  2500  Server 


Robust  and  Scalable  Server 

•  Intel* *  Pentium*  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM 

•  18GB5  (10K  RPM)  Ultra3  SCSI  Hard  Drive 

•  Embedded  Dual-Channel  Ultra3  SCSI  Controller 

•  Embedded  Intel®  10/100  NIC 

•  Hot-Plug,  Redundant  Cooling  Fans 

•  Optional  Hot-Plug,  Redundant  Power  Supplies 

•  Optional  Embedded  Dual-Channel  RAID  Solution 

•  3-Yr  Next  Business  Day  On-Site  Service3 


$1899 


QuickLoan:  S50/mo„  48  mos!’ 

©E-VALUE  Code: 

1 


’11069-290318 


Recommended  upgrades: 

•  PowerConnect"  3024*  24-Port  Managed  Switch,  add  $699 

•  System  including  Windows'  2000  Server  is  $2699 


PowerEdge™  1650  Server 


PowerEdge™  2550  Server 


NEW  Highly  Available  1U  Rack-Optimized  GP  Server 

•  Intel1  Pentium®  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM 

•  18GB5  (1  OK  RPM)  Ultra3  SCSI  Hard  Drive 

•  Dual  Embedded  Gigabit  NICs 

•  Hot-Plug,  Redundant  Cooling  Fans 

•  Optional  Embedded  Dual-Channel  RAID  Solution 

•  Optional  Redundant  Power  Supplies 

•  3-Yr  Next  Business  Day  On-Site  Service3 


2U  Rack-Optimized  Performance  and  Scalability 

•  Intel*  Pentium*  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM 

•  18GB5  (10K  RPM)  Ultra3  SCSI  Hard  Drive 

•  Dual-Channel  Integrated  Ultra3  SCSI  Controllers 

•  2  Embedded  NICs -One  Gigabit  and  One  Intel®  10/100 

•  Optional  Embedded  Dual-Channel  RAID  Solution 

•  Optional  Redundant  Power  Supplies 

•  3-Yr  Next  Business  Day  On-Site  Service3 


$1699 


QuickLoan:  $45/mo„  48  mos!’ 

©E-VALUE  Code: 

1 


’  11069-290316 


$1799 


QuickLoan:  S48/mo,  48  mos!1 

©E-VALUE  Code: 

1 


'11069-290317 


Recommended  upgrade: 

•  System  Including  Windows*  2000  Server  is  S2499 


Recommended  upgrades: 

•  Redundant  Power  Supplies,  add  $229 

•  System  Including  Windows*  2000  Server  is  $2599 


pentium®/// 


Servers  for  any  size  business. 


Easy  as 


D*LL 


Visit  www.dell.com/computerworld  or  call  toll  free  1-888-325-4272. 


Dell  PCs  use  genuine  Microsoft*  Windows® 

Call:  M-F  7a-8p  Sat  8a-5p  CT  *  ,  •  ,,  .  .  ■> 

Pricing,  specifications,  availability  and  terms  nl  utter  may  change  without  notice.  Taxes  and  shipping  charges  extra,  and  vary.  tJ  S.  Dell  Small  Business  (BSD  and  BASDI  new  purchases  only.  Dell  cannot  be  held  WWW.HllCr0S0lt.C0ni/piracy/n0Wt0lBII 
responsible  for  errors  in  typography  or  photography. 


'This  device  has  not  been  approved  by  the  Federal  Communications  Commission  for  use  in  a  residential  environment  This  device  is  not,  and  may  not  be.  offered  for  sale  or  lease,  or  sold  or  leased  for  use  in  a 

residential  environment  until  tire  approval  of  the  FCC  has  been  obtained. 

Tor  a  copy  of  our  Guarantees  or  Limited  Warranties,  write  Dell  USA  L.P..  Attn:  Warranties,  One  Dell  Way.  Round  Rock,  Texas  78682.  ’Service  may  be  provided  by  third  parry.  Technician  will  be  dispatched,  if  necessary, 
following  phono  based  troubleshooting.  To  receive  Next- Business- Day  sendee.  Dell  must  notify  service  provider  before  5  pm  (depending  on  service  contract)  customer  s  time  Availability  varies  Tor  hard  drives.  G8  means 
t  billion  bytes:  accessible  capacity  varies  with  operating  environment  1  Monthly  payment  is  based  on  a  48-month  12.49%  interest  rate  for  qualified  business  customers.  Your  interest  rate  and  monthly  payment  may  be 
same  or  higher,  depending  on  your  creditworthiness.  OFFER  VARIES  BY  CREDITWORTHINESS  OF  CUSTOMER  AS  DETERMINED  8Y  LENDER.  Taxes,  fees  and  shipping  charges  are  extra  and  may  vary  Minimum 
transaction  si2e  of  $500  is  required  Maximum  aggregate  financed  amounts  not  to  exceed  $25,000  Not  valid  on  past  orders  or  financing  QuickLoan  is  from  CIT  Online  8ank  to  Dell  Small  Business  ISSDi  customers  with 
approved  credit  '"QuickLease  arranged  by  Dell  Financial  Services  L.P..  an  independent  entity,  to  qualified  Small  Business  (BSD  and  BASD)  customers.  0%  leasing  offer  only  applicable  for  a  24-month  Fair  Market  Value 
(FMV|  QuickLease  and  valid  on  hardware  products  only.  Applicable  taxes,  fees  and  shipping  not  included.  Minimum  transaction  size  of  $500  is  required.  At  die  end  of  the  FMV  QuickLease  term,  the  Lessee  shall  have  the 
following  options  Purchase  the  equipment  for  the  then  FMV,  lenow  the  tease  or  return  the  equipment  to  the  Lessot.  Please  contact  your  Dell  Financial  Services  representative  for  further  details  All  terms  are  subject  to 
credit  approval  and  availability  and  are  sub]ect  to  change  without  notice.  Not  valid  on  past  orders  or  leases  Dell,  the  stylized  E  logo.  E-Value,  PowerEdge  and  PowerConnect  are  trademarks  of  Dell  Computer  Corporation, 
Intel.  Intel  Inside,  Pentium  and  Celeron  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  MS,  Microsoft,  and  Windows  are  registered  trademarks  : 
Microsoft  Corporation.  ©2002  Dell  Computer  Corporation.  All  rights  reserved. 
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USE  THE  POWER  OF 
THE  E-VALUE  CODE. 

Match  our  latest  technology 

with  our  latest  prices  Enter  the 

VALUE 

E-VAIUE  code  online  or  give  it 
to  your  sales  rep  over  the 
phone  wwwdell  com/evalue 
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nitude  [of]  greater  complexity  in  this.” 

That  level  of  complexity  could  flum¬ 
mox  many  mainstream  IT  profes¬ 
sionals,  but  the  skills  that  made  them 
successful  in  retail,  manufacturing,  en¬ 
gineering  and  other  industries  are  still 
applicable  in  biotech  and  pharmaceuti¬ 
cal  companies.  There’s  just  an  addi¬ 
tional  layer  of  complexity  into  which 
they  can  grow  —  if  that’s  the  direction 
they  choose,  Dupuis  says. 

Because  they  have  to  maintain  not 
only  a  global  scientific  research  opera¬ 
tion  but  also  an  immense  communica¬ 
tions  infrastructure,  large  pharmaceu¬ 
tical  companies  provide  the  greatest 
opportunity  for  IT  professionals  with¬ 
out  a  medical  or  scientific  background. 

That  range  of  needs  means  that  IT 
workers  with  good  technical  skills  may 
be  able  to  plug  into  a  research  opera¬ 
tion,  according  to  David  Pioli,  head  of 
global  informatics  in  lead  generation  at 
Aventis  SA  in  Frankfurt.  The  Schiltig- 
heim,  France-based  pharmaceutical 
company  was  formed  two  years  ago  by 
the  merger  of  Germany-based  Hoechst 
Marion  Roussel  AG  and  France-based 
Rhone-Poulenc  Rorer  SA.  Project  man¬ 
agement,  application  development, 
systems  management  and  personnel 
management  skills  are  always  applica¬ 
ble,  Pioli  says  (see  sidebar). 

Bonding  IT  and  Scientists 

But  if  IT  professionals  want  to  be 
successful  in  supporting  or  becoming 
part  of  Aventis’  research  teams,  he 
says,  they  have  to  learn  enough  about 
the  science  and  research  activities  to 
form  tight  bonds  among  the  three 
groups  that  drive  the  process:  scien¬ 
tists,  informaticians  and  a  global  IT 
group  that  supports  both  research  and 
mainstream  corporate  activities. 

The  focus  has  to  be  on  the  science 
and  the  tools  that  make  scientific  re¬ 
search  faster  and  more  accurate,  Pioli 
says.  Delivering  those  tools  —  algo¬ 
rithms  or  analytic  applications  that  an¬ 
swer  specific  biological  or  chemical 
questions  —  is  primarily  the  job  of  in¬ 
formaticians,  who  in  turn  rely  on  IT 
professionals  for  support. 

“An  informatics  guy  is  one  half  a 
frustrated  IT  developer  and  one  half  a 
frustrated  scientist,”  Pioli  says.  “It’s  the 
healthy  tension  between  the  two  that 
makes  a  successful  informatician.” 

Informaticians  at  Aventis  must  work 
with  the  IT  department  to  make  sure 
the  applications  are  scalable,  build  and 
maintain  the  high-end  servers  that  run 
them,  and  make  sure  the  systems  are 
transferrable  to  other  research  groups 
so  they  aren’t  reinventing  the  same 
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tools  over  and  over. 

“It’s  all  about  synergies,  avoiding  du¬ 
plication  of  effort,”  says  Pioli.  “If  you 
just  let  informatics  run  away  with  it¬ 
self,  you  end  up  building  a  mini-IS 
group  in  informatics  and  another  to 
support  the  rest  of  the  business.” 

The  informatics  and  information 
systems  teams  at  Aventis  are  still  sepa¬ 
rate,  but  the  company  has  created  a 
semiformal  scientific  computing  group 
to  give  concentrated  IT  support  to  the 
informatics  groups,  which  have  about 
200  staffers  worldwide. 

Middlesex,  England-based  Glaxo¬ 
SmithKline  PLC  (GSK)  and  many 
other  pharmaceutical  companies  have 
similar  mixed  teams  whose  goal  is  to 


Do-It-Yourself 

nformatics 

Biotechnology  and  pharmaceutical  compa¬ 
nies  will  spend  increasingly  large  amounts  of 
money  on  bioinformatics  during  the  next  few 
years,  but  the  bulk  of  their  spending  will  con¬ 
tinue  to  go  toward  systems  and  applications 
they  build  in-house. 


THIRD-PARTY 

TECHNOLOGY 

IN-HOUSE 

TECHNOLOGY 

2000 

S80M 

S750M 

2001 

S160M 

SIB 

2002 

S320M 

S1.22B 

2003 

S640M 

S1.33B 

2004 

S960M 

S1.5B 

2005 

S1.44B 

S1.57B 

SOURCE  THE  BOSTON  CONSULTING  GROUP  INC..  BOSTON 


give  the  scientists  as  much  research 
Firepower  as  possible  while  maximiz¬ 
ing  the  money  and  time  spent  on  IT, 
says  Terry  Francis,  head  of  operations 
and  infrastructure  for  the  cheminfor- 
matics  group  at  GSK. 

“You  have  a  Grand  Canyon  chasm 
between  a  bench  scientist  and  a  classic 
IT  person,”  Francis  says.  “One  group 
doesn’t  understand  that  when  the  net¬ 
work  goes  down,  people  get  fired.  The 
other  group  doesn’t  know  much  about 
what  the  scientists  do.  You  need  an  ed¬ 
ucated  interface  between  the  two.” 

Staying  Flexible 

For  both  GSK  and  Aventis,  that  edu¬ 
cated  interface  consists  of  a  mixed 
group  of  science-savvy  IT  people  and 
informaticians. 

IT  people  working  in  these  groups 
have  to  be  agile  enough  to  pick  up  on 
scientific  concepts,  willing  to  proto¬ 
type  new  systems  rapidly  to  keep  up 


with  the  pace  of  research  and  adapt¬ 
able  enough  to  keep  up  with  rapid 
change,  according  to  Simon  Dear,  who 
heads  a  170-person  global  team  as  di¬ 
rector  of  bioinformatics  engineering 
for  genetics  research  at  GSK. 

“We  really  are  looking  for  a  broad 
background  and  the  ability  to  adapt,” 
Dear  says. 

Application  development  skills  in 
areas  such  as  Java,  C,  database  pro.- 
gramming  and  administration,  storage 
and  data  management,  are  also  keenly 
sought  after,  Francis  says. 

But  success  in  this  field  doesn’t  nec¬ 
essarily  depend  on  a  scientific  back¬ 
ground.  Dear’s  background  is  in  engi¬ 
neering. 

“There’s  a  lot  of  opportunity  in  in¬ 
formatics  in  GSK  to  prove  that  you’re 
effective  and  to  learn  on  the  job,”  Dear 
says.  “Everybody  learns  the  appropri¬ 
ate  level  of  the  science.  They  just  have 
to  be  willing  to  get  in  there  and  get 
their  hands  dirty.” 

Biotech  Bearing 

At  smaller  biotech  companies,  the 
administrative  integration  problem  is 
less  severe  because  most  firms’  efforts 
go  into  the  science  itself  and  not  into 
supporting  a  global  administrative  in¬ 
frastructure,  according  to  Mark 
Adams,  vice  president  of  bioinfor¬ 
matics  at  drug  discovery  company 
Variagenics  Inc.  in  Cambridge,  Mass. 

Biotech  companies  still  need  data¬ 
base  administrators,  project  managers 
and  IT  managers  who  can  negotiate  a 
contract,  maintain  a  budget  and  build  a 
data  center  where  the  compute-power 
needs  are  high,  Dupuis  says. 

But  anyone  who  can  build  a  high- 
performance  cluster  or  develop  a  com¬ 
plex  analytical  application  that  runs  ef¬ 
ficiently  on  a  parallel-processing  archi¬ 
tecture  will  always  be  welcome  in  a 
biotech  shop,  says  Adams,  a  bioinfor¬ 
matics  manager  who  also  has  an  engi¬ 
neering  background. 

“You  just  have  to  have  people  with 
varied  interests  who  want  to  learn  how 
to  apply  stuff  in  a  different  area,” 
Adams  says.  “They  have  to  be  not  just 
tolerant  of  change  but  excited  by  it  and 
be  able  to  recognize  that  the  science  is 
evolving  and  the  challenge  for  IT  is  to 
not  slow  that  down  but  to  respond  to 
that  appropriately.”  I 


Fogarty  is  a  freelance  writer  in  Sudbury, 
Mass.  Contact  him  at  kevinjfogarty@ 
yahoo.com. 


Quick 

Link© 


Read  about  IT  job  opportunities 
with  vendors  of  biotech  software 
systems: 

www.computerworld.com/q728155 


Biotech  Job 

Prospects _ 

TYPES  OF  JOBS 

Academic  environments:  Administrative  and 
mainstream  IT.  Most  informatics  are  handled  by 
graduate  assistants  or  computer  scientists  hired 
by  academic  laboratories. 

Pharmaceutical  companies:  All  have  large 
mainstream  IT  organizations  that  could  be  a 
good  jumping-off  point  for  IT  professionals 
interested  in  working  with  biotech  researchers. 
They  also  have  formalized  teams  of  informatics/ 

IT  people,  which  provides  a  good  learning  envi¬ 
ronment. 

Biotech  companies:  Tend  to  hire  proportionate¬ 
ly  more  informaticians  than  general  IT  workers, 
but  jobs  also  exist  for  individual  contributors  and 
managers.  Someone  has  to  build  and  maintain 
high-performance  systems  and  applications. 


JOB  DESCRIPTIONS 
Informatician:  Master’s  or  Ph.D.  in  biology  or 
chemistry.  Usually  trained  in  science  and  have 
self-taught  programming  skills  or  a  few  program¬ 
ming  classes  and  certification.  Not  an  opportunity 
for  most  IT  managers. 

Application  developer:  Usually  some  back¬ 
ground  in  biology  or  chemistry,  but  may  also  have 
a  background  in  mathematics.  Specialize  in  creat¬ 
ing  algorithms  and  analytic  methods  to  pick  pat¬ 
terns  out  of  masses  of  genomic  or  proteomic  data. 

IT  support:  Some  familiarity  or  background  in 
science,  but  specializing  in  application  develop¬ 
ment  and  systems  integration.  Key  skills  include 
the  ability  to  talk  to  informaticians  and  scientists 
and  ascertain  what  they  actually  need  and  how  to 
build  it  in  a  way  that’s  stable  and  transferable  to 
other  research  groups. 

Project  managers:  Often  have  no  background  in 
science  but  have  extensive  IT  project  management 
experience.  A  key  position  and  a  skill  for  pharma¬ 
ceutical  and  biotech  companies.  Often  a  path  to 
advancement  to  manager  of  informatics  groups. 


JOB  SKILLS  NEEDED 

■  Java 

■  Perl 

■  C,  C++ 

■  Systems  and  network  engineering 

■  Project  management 


SALARIES 

$80,000  to  $120,000  for  midlevel  managers  or 
senior  IT  people.  A  background  in  both  science 
and  IT  may  bring  a  premium. 


AVAILABILITY 

In  this  economy,  IT  skills  aren’t  hard  to  find,  but 
jobs  are  open,  and  pharmaceutical  and  biotech 
companies  are  hiring. 

FUTURE 

Informaticians  are  getting  more  background  in 
straight  IT,  and  several  universities  now  have  de¬ 
gree  courses  in  informatics,  which  is  increasing 
the  availability  of  people  trained  specifically  in 
bioinformatic  techniques  and  technology. 


Supplier  Intelligence  |  Organizational  Intelligence  |  Customer  Intelligence  |  Intelligence  Architecture  j  Enterprise  intelligence 


How  can  you  bring  consistency  a 
and  clarity  to  decision  making? 

Unleash  the  potential  of  m 
all  your  information  assets? 

And  give  your  enterprise  a  single,  ■ 
shared  version  of  the  truth? 


SAS  is  all  you  need  to  know. 


SAS  brings  together  information  from  any  source, 
across  every  platform,  and  creates  real  intelligence. 
We’re  No.  1  in  data  warehousing.  And  only  SAS 
integrates  data  quality  with  today’s  most  powerful 
extraction,  transformation  and  loading  (ETL) 
capabilities.  To  find  out  how  top  companies  are 
reaping  bottom-line  rewards  from  SAS,  call  toll  free 
1  866  270  5727  or  visit  www.sas.coin/vvarehouse 


SAS  and  all  other  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc.  in  the  USA  and  other  countries.  ®  indicates  USA  registration 
©  2002  SAS  Institute  Inc.  All  rights  reserved.  49349US.0302 


34  BUSINESSBOOK  REVIEWS 

X-Engineering  and  the 

Germany  of  me  Future 


New  tomes 
that  advance  the 
re-engineering 
mantra,  examine 
the  impact  the 
Web  is  having 
on  corporate 
decision-makers 
and  explore  the 
intergenerational 
dynamics  at  play 
in  today’s  work¬ 
force. 


JAMES  CHAMPY 


;  ifsimMemm  com 


X-Engineering  the  Corporation: 
Reinventing  Your  Business  in  the 
Digital  Age,  by  James  Champy 
(Warner  Books,  232  pages, 
$25.95).  Champy,  the  co-godfa¬ 
ther  (with  Michael  Hammer) 
of  the  re-engineering  move¬ 
ment  of  the  early  ’90s,  takes 
re-engineering  into  the  pre¬ 
sent  with  a  book  that  offers 
corporations  advice  on  how  to 
integrate  their  processes  and 
with  whom  —  specifically, 
suppliers  and  customers  — 
with  a  heavy  emphasis  on  the 
role  IT  plays. 

Champy  knows  the  role  of 
IT  through  his  work  as  chair¬ 
man  of  consulting  at  Dallas- 
based  Perot  Systems  Corp. 
and  as  a  former  Computer- 
world  columnist.  Much  of  his 
advice  should  resonate  with 
IT  leaders. 

Take  note  of  Chapter  5: 
There,  Champy  poses  four 
key  questions  that  a  company 
must  ask  itself  about  its  use  of 
and  investment  in  IT  to  en¬ 
able  it  to  design 
new  processes 
and  harmonize 
them  with  others, 
as  well  as  to  learn 
the  needs  and  ex¬ 
pectations  of  cus¬ 
tomers  and  sup¬ 
pliers. 

Also,  pay  atten¬ 
tion  to  Chapter  9, 
where  Champy 
lists  and  discusses 
seven  old  and 
new  tenets  of 
management,  all 
of  which  provide 
food  for  thought 
for  a  CIO,  espe¬ 
cially  this  pair: 

|  Old  tenet: 

Leave  IT  to  the 
technologists. 

New  tenet:  IT  is 
everyone’s  job. 

—  Rick  Saia 


The  Company  of  the  Future:  How 
the  Communications  Revolution 
is  Changing  Management,  by 

Frances  Cairncross  (Harvard 
Business  School  Press,  224 
pages,  $27.50).  While  the  short¬ 
term  profitability  of  the  dot¬ 
com  era  was  certainly  hyped, 
the  influence  that  the  Internet 
will  have  on  how  managers  run 
and  structure  corporations  will 
be  long  lasting.  That’s  the  cen¬ 
tral  message  from  Cairncross, 
management  editor  at  The 
Economist,  who  lays  out  a  use¬ 


ful  road  map  of  scenarios  and 
ideas  for  executives  to  ponder. 

In  addition  to  exploring  the 
effect  of  the  Internet  revolu¬ 
tion  on  knowledge  manage¬ 
ment,  collaboration  and  inno¬ 
vation,  Cairncross  delves  into 
the  impact  the  Web  is  having 
on  corporate  decision-makers 
in  managing  an  ever-shifting 
workforce  and  in  ensuring 
that  geographically  dispersed 
project  teams  are  working  on 
the  same  page. 

Cairncross  is  deft  at  point¬ 
ing  out  companies  that  have 
leveraged  the  Internet  to  their 
benefit  and  others  that  have 
stumbled.  For  example,  she 
points  to  Ford  Motor  Co., 
which  is  using  the  Internet  to 
deepen  relationships  with  its 
distributors  and  suppliers.  Yet 
the  Internet  can’t  prevent  a  re¬ 


lationship  like  the  Ford/ 
Firestone  tire  debacle  from 
turning  sour,  she  points  out. 

One  area  worth  noting:  a 
section  before  the  first  chap¬ 
ter  that  offers  Cairncross’ 

“Top  10  Rules  for  Survival.” 

—  Thomas  Hoffman 


The  Oracle  of  Oracle:  The  Story 
of  Volatile  CEO  Larry  Ellison  and 
the  Strategies  Behind  His  Com¬ 
pany’s  Phenomenal  Success,  by 

Florence  M.  Stone  (Amacom 
Books,  224  pages,  $24.95).  Elli¬ 
son  is  arguably  the  most  flam¬ 
boyant  figure  in  the  IT  world, 
widely  noted  as  much  for  his 
arrogance  as  for  his  brilliance 
and  visionary  thinking. 

But  he  holds  a  prime  spot 
in  the  high-tech  industry  as 
the  shaper  and  leader  of  Ora¬ 
cle  Corp.,  the  world’s  second- 
largest  software  company  af¬ 
ter  Microsoft  Corp.  Stone,  the 
author  of  nine  books  (includ¬ 
ing  Business  the  Amazon.com 
Way  and  Business  the  Dell 
Way,  under  the  pseudonym 
Rebecca  Saunders),  explores 
Ellison’s  personal  style  and 
business  success. 

After  giving  a  brief  history 
of  Ellison  and  his  company, 
Stone  focuses  on  values  and 
strategies,  ending  with  her 
views  and  insights  on  where 
Oracle  and  the  software  indus¬ 
try  could  be  heading.  In  anoth- 
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er  chapter,  she  concludes  that 
despite  the  press’s  and  pub¬ 
lic’s  obsession  with  Ellison’s 
personality,  there  are  four 
qualities  about  him  in  busi¬ 
ness  that  can’t  bedgnored:  his 
management  ability,  leader¬ 
ship,  vision  and  philanthropy. 

—  Rick  Saia 


They  Are.  Why  They  Clash.  How 
to  Solve  the  Generational  Puzzle 
at  Work,  by  Lynne  C.  Lancaster 
and  David  Stillman  (Harper- 
Collins,  240  pages,  $25.95). 
Whether  you’re  a  senior  exec¬ 
utive,  middle  manager  or 
worker  bee,  you’d  have  to  be 
living  in  a  cave  (or  telecom¬ 
muting  full-time)  not  to  see 
the  intergenerational  gaps  that 
exist  in  today’s  workplace. 

From  “traditionalist”  em¬ 
ployees,  whose  heads-down 
work  ethic  stems  from  the 
Great  Depression,  to  “millen- 
nials,”  who  bring  a  mix  of 
smarts  and  social  conscience 
to  the  table,  the  rifts  between 
worker  strata  are  all  too  evi¬ 
dent.  Baby  boomer  Lancaster 
and  Generation  Xer  Stillman 
present  plenty  of  fun  anec¬ 
dotes  for  workers  from  the 
four  generations  (traditional¬ 
ists,  baby  boomers,  Gen  Xers 
and  millennials)  to  draw  from. 

As  difficult  as  it  can  be  for  a 
baby  boomer  to  understand 
and  connect  with  a  Gen  Xer  — 
much  less  with  a  millennial 
whose  tastes  and  interests 
may  seem  like  polar  opposites 
—  Lancaster  and  Stillman  of¬ 
fer  some  valuable  lessons  that 
IT  managers  and  business  unit 
executives  can  use  to  help 
close  some  of  those  gaps  and 
make  diverse  workforces  op¬ 
erate  more  effectively. 

—  Thomas  Hoffman 
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Active  Archive  Solutions."  The  intelligent  way  to  optimize  database  performance. 

It’s  crowded.  It’s  slow.  It’s  your  database.  Paying  for  more  hardware  isn’t  the  answer;  smarter  data  management  is. 
Presenting  Princeton  Softech’s  Active  Archive  Solutions'."  Active  archiving  removes  infrequently  used  data,  yet  keeps 
that  data  “active”  for  easy  access.  Freeing  up  room  in  your  database  and  improving  performance.  So  if  it's  space  you 
want,  Store  Smarter.  Call  800.457.7060  or  visit  www.storesmarter.com. 

©  2002  Princeton  Softech  Inc.  All  rights  reserved.  pri/lCGtOD  « 
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No  frequent-flier  miles,  but  videoconferencing 
is  proving  to  be  a  cheaper  amd  easier  way  for  business- 
people  to  meet  post-Sept.  11.  By  James  Cope 


VIDEOCONFERENCING,  which 
has  long  promised  to  save 
business  travelers  both  mis¬ 
ery  and  money,  gained  new 
interest  immediately  follow¬ 
ing  the  Sept.  11  tragedy.  Several  months 
later,  as  most  businesspeople  begin 
again  to  embrace  the  skies,  some  com¬ 
panies  remain  convinced  that  video 
meetings  can  save  time  and  money  and 
offer  a  viable  alternative  to  travel. 

Take  Ernst  &  Young  LLP  in  New 
York,  which  by  the  end  of  January  was 
hosting  more  than  200  videoconfer¬ 
ences  per  month.  Although  that’s  half 
of  the  800  or  so  videoconferences  the 
Big  Five  firm  ran  in  October  and  No¬ 
vember,  the  numbers  remain  high  — 
up  to  100  more  video  calls  per  month 
than  in  the  same  period  last  year,  ac¬ 
cording  to  Craig  Brandofino,  assistant 
director  of  audio  and  videoconferenc¬ 
ing  services  at  Ernst  &  Young. 
Videoconferencing  saves  Ernst  & 


Young  $150,000  to  $175,000  per  month 
in  travel  expenses,  says  Brandofino, 
who  notes  that  his  company  uses  video 
connections  for  everything  from  inter¬ 
nal  town  hall  gatherings  to  meetings 
with  clients.  The  payback  in  travel  sav¬ 
ings,  based  on  the  cost  of  equipment, 
installation,  Integrated  Services  Digital 
Network  (ISDN)  lines  and  manage¬ 
ment,  took  just  four  to  six  months, 
Brandofino  says. 

New  York-based  Bristol-Myers 
Squibb  Co.  doesn’t  quantify  the  ROI 
for  videoconferencing  as  closely  as 
Ernst  &  Young.  Nevertheless,  the  phar¬ 
maceutical  giant’s  videoconferencing 
strategy  was  initially  aimed  at  travel 
savings,  says  Steve  Marson,  director 
of  the  company’s  e-conferencing  de¬ 
partment. 

“We  worked  closely  with  corporate 
travel  to  find  routes  where  people 
were  traveling  that  cost  the  most  mon¬ 
ey,”  Marson  says.  “Then  we  targeted 


our  investing  [in  conferencing  technol¬ 
ogy]  there.”  Many  of  the  routes  Bristol 
Myers  targeted  for  videoconferencing 
are  between  the  U.S.  and  Europe  and 
between  the  continental  U.S.  and  Puer¬ 
to  Rico,  according  to  Marson. 

Setup  Costs 

Generally,  a  small  room  or  executive 
video  system,  like  the  one  set  up  by 
Bristol-Myers  in  Puerto  Rico,  costs 
$20,000  to  install  “once  all  the  parts  of 
the  system,  local  network  and  labor  are 
included,”  says  Marson.  “And  then  [it] 
costs  $10,000  a  year  to  run.” 

Beyond  the  travel  cost  savings  that 
videoconferencing  systems  generate, 
Marson  also  points  to  the  productivity 
gains  that  employees  reap  from  not 
having  to  travel  to  and  from  meetings. 

A  study  released  last  month  by 
WorldCom  Inc.  confirms  that  notion. 
According  to  the  study,  an  off-site 
meeting  gobbles  up  21  hours  in  travel, 
preparation  and  meeting  time  com¬ 
pared  with  four  hours  when  done  via  a 
videoconference  (see  chart). 

At  Bristol-Myers,  videoconferencing 
is  but  one  component  in  a  range  of  vir¬ 
tual  conferencing  technologies  that 
also  include  audio  and  Web  conferenc¬ 
ing  and  streaming  video  broadcasting. 

Marson  says  one  high-ranking  sales 
manager  told  him  that  two-way  video  is 
normally  used  “when  you  need  to  see 
the  whites  of  their  eyes.”  He  was  refer¬ 
ring  to  videoconferences  that  sales 
managers  regularly  hold  with  staff  to 
get  commitments  on  sales  targets. 

Andy  Nilssen,  an  analyst  at  Wain- 
house  Research  LLC  in  Brookline, 
Mass.,  says  a  lot  of  top-level  managers 
support  videoconferencing  because  it’s 
a  way  “to  make  sure  people  are  paying 
attention  by  reading  their  body  lan¬ 
guage  —  or  ...  to  tell  if  someone  walks 
out  of  the  room  while  the  conference 
is  in  session.” 

Marson  says  large-scale  videocon¬ 
ferencing  even  costs  less  than  telecon- 


Fear  of  Flying? 


One  quarter  of  travelers  who  have  averaged  six  business  trips  in  the  past  year  have  reduced  air 
travel  since  Sept.  11,  according  to  “Meetings  in  America  IV:  The  New  Road  Warrior,”  a  report 
released  March  6  by  WorldCom  Inc. 


Travelers  who  have  canceled  trips  have  turned  to  the  following 
alternatives  (multiple  responses  allowed): 
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Business  travelers  who  have  changed  their  travel  plans  since  Sept. 
11  are  more  likely  to  use  videoconferencing  in  the  future: 


USEDSINCESEPT.il 

_ ! _ 

TO  BE  USED  IN  FUTURE 

Total  conferencing 

55% 

Total  conferencing 

62% 

Audio 

42% 

Audio 

36% 

Video  32%  Video  39% 

Web  23%  Web  26% 

SOURCE  DEC  12  TO  JAN  5  SURVEY  OF  323  U  S  BUSINESS  TRAVELERS  WHO  HAD  TAKEN 
THREE  OR  MORE  BUSINESS  TRIPS  BY  AIR  IN  THE  PREVIOUS  12  MONTHS  SURVEY  CON¬ 
DUCTED  BY  TAYLOR  NELSON  SOFRES  INTERSEARCH.  HORSHAM.  PA..  FOR  WORLDCOM 


Going  the  XSP  Route 

An  alternative  to  managing  videoconfer¬ 
encing  in-house  is  using  an  IP-based 
videoconferencing  service. 

Brian  Taleb-Zadeh,  director  of  network 
engineering  for  Tri-City  Brokerage  Inc.  in 
San  Francisco,  is  doing  just  that.  After 
Sept.  11,  Taleb-Zadeh  says 
he  was  asked  by  senior 
management  to  investigate 
setting  up  videoconferenc¬ 
ing  as  a  way  to  cut  down  on 
travel.  He  subsequently 
struck  a  deal  with  the  Glow- 
point  videoconferencing  ser¬ 
vice  operated  by  Wire  One 
Technologies  Inc.  in  Hillsdale,  N.J. 

Tri-City  pays  Wire  One  a  flat  rate  of 
$399  per  month  for  each  of  three  U.S.  sites 
connected  to  the  videoconferencing  ser¬ 
vice.  That  includes  30  hours  of  videocon¬ 
ferencing  time  every  month,  which  Taleb- 
Zadeh  says  is  more  than  adequate,  noting 
that  he  doesn't  have  to  run  the  numbers  to 
know  that  the  service  is  saving  the  broker¬ 
age  travel  dollars. 

-  James  Cope 


ER:  Tri-City 
Brokerage  Inc. 
SERVICE:  Glowpoint 
videoconferencing 
service 

COST:  S399  per 
month  per  site  for 
30  hours/month 


ferencing.  “I  use  a  ratio  of  somewhere 
around  10-to-l  for  the  relative  costs  of 
audio-  and  videoconferencing,”  he  says. 

For  example,  a  500-person  meeting 
would  cost  more  than  $5,000  per  hour 
if  all  the  participants  used  individual 
phone  calls  to  audioconference,  but  it 
would  cost  less  than  $1,000  if  the  par¬ 
ticipants  were  gathered  into  five 
videoconference  rooms  each  holding 
100  people,  he  says. 

Ernst  &  Young  and  Squibb  primarily 
use  room-based  videoconferencing 
systems  that  run  over  ISDN  lines. 
However,  both  companies  are  testing 
video  over  IP,  which  enables  compa¬ 
nies  to  conduct  videoconferencing 
over  an  existing  wide-area  network 
instead  of  leasing  ISDN  lines  from  a 
local  phone  company. 

“We’re  looking  at  video  to  the  desk¬ 
top,”  says  Brandofino,  referring  to  a  pi¬ 
lot  program  Ernst  &  Young  has  under 
way  using  Via  Video  technology  from 
Milpitas,  Calif.-based  Polycom  Inc.  Via- 
Video  is  a  small  camera  with  a  built-in 
microphone  that  sells  for  just  under 
$600,  far  less  costly  than  large-room 
systems  that  sell  for  around  $15,000. 1 


Cope  is  an  Indiana-based  freelance 
writer.  Contact  him  at  jamescope@ 
sbinet.com. 


For  a  list  of  videoconferencing 
resources,  goto  www. 
computerworld.com/q?28166 


How  the  FIFA  World  Cup™  kicked  off  an  IP  telephony  first.  The  largest  sporting 

event  in  the  world,  the  FIFA  World  Cup ™  utilizes  over  40,000  volunteers  and  12,000  media  personnel  who  must 
communicate  between  20  venues  in  2  countries,  24-hours  a  day.  And  they  needed  an  IP  telephony  solution 
that  could  work  with  it  all.  So  they  chose  Avaya  to  build  one  of  the  world’s  largest  converged  networks.  Our  IP 
solution  gave  them  the  same  features  and  functionality  of  sophisticated  office  phone  systems,  with  the  ability  to 
talk,  transmit  data,  manage  e-mail,  faxes  and  even  wireless  communications  simultaneously  —  all  over  a  single 
network.  For  a  white  paper  detailing  how  Avaya  is  powering  the  FIFA  World  Cup”",  visit  avaya.com/nowtwo. 

(£)  AVAVA 

_ " _ 

FIFA  WORLD  CUP 

l^REAjAmN  Official  Partner 


38 


BUSINESSCAREERS 


Fm  an  out-of-work  Cobol  programmer  with  almost  three 
decades  of  experience.  Fve  been  looking  for  work  in  the 
Chicago  area  for  more  than  six  months,  at  almost  any 
salary.  I  can’t  get  interviews;  I  can’t  get  an  offer.  I  rarely 
even  get  a  reply  to  my  applications. 


Dear  Career  Adviser: 


Agencies  claim  that  they’re 
swamped  with  replies  for  every 
vacancy.  And  now  Computer- 
world  is  running  articles  claim¬ 
ing  that  there’s  a  shortage  of 
people  with  exactly  my  skills? 

—  Questioning  Reality 

Dear  Career  Adviser: 

I’m  an  ex-MVS  systems  pro¬ 
grammer  who  gets  calls  from 
recruiters  absolutely  desperate 
for  people  to  run  mainframes. 
Right  now,  I  don’t  know  a  single 
qualified  mainframe  program¬ 
mer  who  is  out  of  work;  I  do 
know  unemployed  Cisco  and 
Java  people.  Unlike  most  Win¬ 


dows  programmers,  I  earn 
six  figures.  Why  do  people 
who  haven’t  learned  new  main¬ 
frame  skills  in  years  think  they 
will  earn  more  as  newbies  on 
another  platform? 

—  EX-MVS 

Dear  Questioning  Reality 
and  Ex-MVS: 

In  the  past  24  months, 
mainframe  job  opportunities 
—  and  compensation  pack¬ 
ages  —  have  plummeted. 
Mainframe  applications  are 
mostly  in  maintenance  mode. 

“There  is  very  little,  if  any, 
new  development  being  done 
in  mainframe  technology,” 


says  Rob  Koss,  branch  man¬ 
ager  at  Interactive  Business 
Systems  Inc.  in  Chicago, 
adding  that  many  mainframe 
people  who  are  out  of  work 
will  need  to  retool  their  skills 
to  land  another  job. 

On  the  other  hand,  some 
mainframe  skills  are  in  de¬ 
mand,  particularly  those 
involving  mainframe  systems 
programming,  database  ad¬ 
ministration  and  DB2. 

“Companies  have  invested 
millions  of  dollars  in  main¬ 
frame  applications  and  data, 
which  they  have  no  intention 
of  abandoning,”  says  Archie 
Patterson,  dean  of  business 


programs  at  Chicago-based 
DeVry  University,  an 
institution  that  has  —  and 
plans  to  keep  —  a  mainframe 
education  program. 

In  addition,  IBM  and  Sun 
both  emphasize  newer  cost- 
efficient  mainframe  strategies. 
And  maintaining  the  200  bil¬ 
lion  lines  of  Cobol  code  still 
in  use  today  often  requires 
specific  skills  that  are  hard  to 
find  among  today’s  dwindling 
mainframe  applicant  pool. 

So,  what  then  is  “reality”  if 
you’re  seeking  new  work? 

“Only  3%  to  5%  of  current 
jobs  map  to  mainframe  skills,” 
says  Bob  Senatore, 
executive  vice 
president  of  tech¬ 
nology  consulting 
and  staffing  at 
Woodbury,  N.Y.- 
based  Comforce 
Corp.,  a  technol¬ 
ogy  consulting 
and  staffing  firm. 

Furthermore, 
given  most  em¬ 
ployers’  current 
needs,  today’s 
mainframe  hiring 
is  governed  by 


specifics.  This  means  that 
mainframe  talent  is  hired  one 
person  at  a  time  to  fill  very 
well-defined  roles,  on  three- 
to  six-month  contracts  at  a 
pay  rate  of  $35  to  $60  dollars 
per  hour,  a  major  drop  from 
previous  highs. 

You  can  bolster  your  value 
as  a  candidate  through  indus¬ 
try-specific  expertise. 

“Mainframe  people  can 
sometimes  boost  their  de¬ 
mand  with  skills  relating 
strongly  to  specific  indus¬ 
tries  such  as  health  care  or 
biotech,”  says  Phil  Psareas, 
a  vice  president  at  Talent 

Tree  Technical  in 
Boston. 

In  any  case,  you 
must  also  show 
skills  well  beyond 
Cobol  and  CICS. 

“If  you  talk 
about  DB2,  secure 
databases  and 
connectivity,  you 
might  be  able  to 
tell  a  pretty  con¬ 
vincing  story  that 
will  merit  getting  a 
salary  every  week,” 
says  Senatore.  I 


fran  quittel  is  an  expert 
in  high-tech  careers  and 


recruitment.  Send 
questions  to  her  at 

www.computerworld.com/ 

career.adviser. 


WORKSTYLES 

Setting  Priorities  at  USAA 


Sharon  Haverlah,  an  IT  sys¬ 
tems  analyst  in  USAA’s  life 
insurance  group,  discusses 
the  IT  culture  at  the  Fortune 
500  company. 

What  are  the  most  critical  sys¬ 
tems  your  department  supports? 

“We  have  11  critical  systems 
and  one  big  central  system 
called  HAL,  which  stands  for 
‘health,  annuities  and  life.’ 
The  other  11  interact  with  the 
HAL  system  but  do  individ¬ 
ual  functions,  like  risk  rating 
for  members.  If  one  of  these 
systems  went  down,  it  would 
mean  representatives  would 
be  unable  to  access  policies 
or  quotes  or  do  customer 
service  for  members.” 

How  would  you  describe  the 
pace  of  your  work?  “We  are 


always  busy.  But  we  have  a 
unique  system  of  prioritizing 
our  work.  We  meet  with  our 
users  and  the  people  who 
control  the  budgets  each 
week  and  decide  on  what’s 
the  most  important  thing  to 
do  —  what  will  have  the 
most  impact,  what  has  to  be 
done  the  fastest,  what  has  to 
happen  for  regulation  pur¬ 
poses.  And  we  rank  our 
work  —  this  is  No.  1  priority, 
this  is  No.  2,  this  is  No.  3.” 

How  would  you  describe  the 
overall  culture  of  IT?  “We’re 
structured  in  terms  of  work, 
but  it’s  pretty  relaxed  in 
terms  of  environment  and 
how  we  dress.  We  don’t  do 
anything  on  the  fly.  If  you 
come  up  with  an  idea,  you 
can  run  it  by  a  senior  analyst 


to  decide  whether  to  present 
it  at  the  open  forum  meeting, 
which  is  held  twice  a  week. 
At  the  meeting,  you  present 
your  idea  to  an  architect,  and 
he  might  throw  back  some 
questions  at  you  so  every¬ 
thing  gets  discussed.” 

How  much  interaction  does 
your  IT  department  have  with 
end  users?  “There  are  quite 
a  few  people  in  our  depart¬ 
ment  who  were  end  users. 


Most  of  the  IT  people  know 
the  business  very  well,  and 
some  meet  with  end  users 
every  day.” 

What  are  some  of  the  ways  IT 
employees  can  communicate 
with  their  superiors?  “There 
are  so  many  open  doors 
here.  And  once  a  month, 
the  assistant  vice  president 
has  a  roundtable  discus¬ 
sion,  where  he  answers 
anonymous  questions. 


We  also  have  roundtable 
meetings  and  lunches  with 
our  president.” 

What  do  you  think  makes  your 
company’s  IT  department 
unique?  “USAA  itself  is 
a  very  large  campus  build¬ 
ing.  There’s  banking,  Star- 
bucks,  cafeterias  with  many 
varieties  of  food,  two  fitness 
centers,  covered  parking, 
security  at  every  gate,  jog¬ 
ging  paths,  tennis  courts,  full 
showers,  even  a  little  library 
if  you  want  to  take  a  break 
and  read  a  book.” 

What  aspect  of  work  do  you 
look  forward  to  each  day? 

“We  work  in  matrices,  so 
you  get  involved  with  lots 
of  people  and  get  exposure 
to  how  things  are  done  in 
other  areas.  And  they’re 
always  willing  to  train  you, 
so  you  really  learn  a  lot.” 

-  Mary  Brandel 
brandels@attbi.com 


In  this  economy,  many  hosting  companies  are  coming  apart  at  the  seams.  So  what 
makes  Verio  the  exception?  We're  a  part  of  NTT  Communications ,  the:  world's 
largest  telecommunications  corporation.  We're  the  largest  web  hosting  company  on 
the  planet  —  more  IT  people  like  you  depend  on  us  for  their  most  critical  hosting 
needs.  We've  been  in  the  hosting  business  since  1996  and  host  thousands  of 
dedicated  servers.  Behind  each  and  every  dedicated  server  is  the  most  experienced 
and  obsessive  tech  staff  in  the  industry.  Call  us,  we'll  be  there  for  you.  J  -3;?  •: 
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I  just  lost  my  third  hosting  com| 
why  should  you  be  my  fouri 
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$199 mo  >  DEDICATED  SERVER 


No  set-up  fees . 

Sign  up  now  at  www.verio.com/ds5  or  cal!  877-624-7891. 

Offer  includes  Intel-Based  Standard  1  Server.  Offer  is  valid  for  new  customers  only.  One  year  contract  required.  Verio  is  a 
trademark  of  Verio  Inc.  All  other  referenced  product  names  are  trademarks  of  their  respective  owners.  ©  2002  Verio  Inc. 
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SO  RELIABLE, 
IT’S  III 
LEADING 
DATABASE 
IN  HEALTHCARE 


More  hospitals  run  their  "life-or-death"  applications 
on  Cache  than  on  any  other  database  system. 

With  reliability  like  this  -  demonstrated  by  the  world's 
most  critical  applications  -  you  should  consider  Cache 
for  your  applications. 

The  speed  and  scalability  of  Cache  are  superior  to  the 
leading  relational  database  products,  even  though  it 
runs  on  much  less  expensive  hardware  and  requires 
far  less  database  administration. 

Cache  uniquely  combines  robust  object  and  relational 
technologies,  coupled  to  a  multidimensional  data 
engine.  Plus,  it  includes  a  rapid  Web  application 
development  environment. 

Cache  is  backed  by  24x7  support  from  InterSystems  - 
a  leader  in  high  performance  databases  for  23  years, 
with  4,000,000  users*  worldwide  in  healthcare, 
financial  services  and  other  industries. 
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InterSystems  ? 

CACHE 


Make  Applications  Faster 


Download  Cache  for  free  or  request  it  on  CD  at  www.lnterSystems.com/Reliable 


*  InterSystems'  database  technology  is  used  by  Ameritrade,  Hitachi,  Johns  Hopkins,  Kennedy  Space  Center, 
Pepsi  Cola,  Prudential  Insurance  Co.,  Shell,  U  S.  Army,  World  Bank  and  other  successful  enterprises. 
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THIS  WEEK 


DECISIVE  INFORMATION 

IT  is  increasingly  using  real-time 
Web  information  to  make  business 
decisions.  Integration  issues  have, 
however,  forced  many  companies 
to  focus  on  more  modest  real-time 
Web  analytics  projects  than  they 
might  like.  PAGE  42 


HANDS  ON 

Reviews  editor  Russell  Kay  takes  a 
look  at  what  may  be  the  first  com¬ 
mercial  high-resolution  imaging 
system  that  lets  you  see  an  object 
in  true  3-D.  PAGE  44 


FUTURE  WATCH 

In  the  not-so-distant  future,  ex¬ 
perts  say,  rampant  viruses  and 
worms  could  bring  down  PDAs, 
mobile  phones,  e-mail  or  even  the 
entire  Web.  PAGE  46 


SECURITY  JOURNAL 

What’s  the  value  of  a  security  certi¬ 
fication?  From  a  practical  day-to- 
day  operations  standpoint,  not 
much,  security  manager  Vince 
Tuesday  concludes  after  taking  two 
exams.  But  certifications  may  have 
other  benefits.  PAGE  48 


Random  numbers  can  be  produced 
by  physical  processes,  such  as 


throwing  a  die,  flipping  a  coin  or 
measuring  intervals  between  parti¬ 
cles  emitted  in  radioactive  decay. 
Software  can  create  only  “pseudo¬ 
random”  numbers,  starting  from  a 
single  random  “seed.”  Learn  more 
in  this  week’s  primer.  PAGE  50 


NICHOLAS  PETRELEY 

A  Fool’s  Look  at  INS  Flap 

I  HAD  A  REMARKABLE  stroke  of  luck  finding  an  insider  contact  this 
week  while  visiting  my  local  convenience  store  to  buy  a  bottle  of 
seltzer  and  a  pickled  egg.  It  turns  out  that  the  clerk  used  to  work  in 
the  IT  department  for  al-Qaeda.  At  first,  I  wasn’t  sure  if  this  guy  was 
on  the  level,  but  then  he  explained  that  his  job  was  to  disseminate 
anthrax  spores  through  spam  e-mail,  which  sounded  genuine  enough. 


He  had  an  interesting  spin  on  the  recent  Immigra¬ 
tion  and  Naturalization  Service  (INS)  fiasco.  The  INS 
took  a  lot  of  heat  when  it  issued  visa  letters  to  the  dead 
terrorists  Mohamed  Atta  and  Marwan  al-Shehhi.  The 
INS  blamed  the  error  on  antiquated  record-keeping 
procedures.  My  inside  source,  who  wishes  to  remain 
anonymous,  says  differently.  According  to  this  fellow, 
the  problem  revolves  around  the  fact  that  the  INS 
volunteered  to  be  one  of  the  first  sites  to  convert  its 
antiquated  systems  to  a  Web  services  infrastructure. 

Al-Qaeda  leaders  got  wind  of  this  and  instructed 
the  organization’s  operatives  in  Afghan  caves  to  write 
a  crack  program  that  used  the  Internet-based  Univer¬ 
sal  Description,  Discovery  and  Integration  (UDDI) 
specification  to  discover  the  Web  services  object  at 
INS  designed  to  issue  valid  visas. 

This  wasn’t  an  easy  project  to  start.  It  was  a  slow, 
tedious  and  expensive  process  to  run  twisted  pair 
from  a  mountain  cave  complex  to  the  nearest  city 
with  Internet  access,  which  is  Kabul.  Worse,  the 
mountain  fauna  were  prone  to  chewing  on  the  ex¬ 
posed  wires  when  they  weren’t  sufficiently  buried. 
Even  worse,  DSL  service  wasn’t  available  in  Kabul 
when  the  project  was  finished.  Of  course,  since  the 
cave  complex  was  a  few  hundred  miles  too  far  from 
the  city  to  support  DSL  access,  this  didn’t  matter. 

Finally,  it  took  a  while  for  al-Qaeda  to  figure  out 
how  to  use  UDDI  to  search  for  the  Web  services  pro¬ 
vided  by  the  INS.  The  agency’s  .Net  Web  services 
were  still  in  beta,  so  it  hadn’t  made  the 
Web  address  for  its  UDDI  registry  publicly 
available.  That  meant  al-Qaeda  had  to  Find 
it  by  scanning  IP  addresses  for  Web  ser¬ 
vices  that  included  any  references  to  INS 
or  visa. 

The  process  was  painstakingly  slow,  but 
it  wasn’t  a  total  loss.  Early  on,  the  crack 
program  that  searched  for  the  keywords 
visa  and  INS  accidentally  ordered  plat¬ 
inum  Visa  credit  cards  for  all  al-Qaeda 
members.  The  organization  later  used  the 
cards  to  pay  for  the  INS  visas,  but  not  be¬ 
fore  accidentally  ordering  a  wide  variety 


of  Netscape  plug-INS,  tickets  to  various  drive-INS 
and  membership  dues  for  organizations  such  as  the 
Infusion  Nurses  Society  and  International  Neuro¬ 
psychological  Society. 

Mohamed  Atta  and  Marwan  al-Shehhi  are  also 
scheduled  to  be  present  at  sit-INS  organized  by 
Greenpeace  and  civil  rights  organizations,  although 
they’re  unlikely  to  attend  in  their  current  condition. 

Aren’t  you  glad  April  Fools’  Day  comes  only  once 
a  year? 

PacBell  Security  Better  Than  Reported 

On  a  more  serious  note,  I’d  like  to  correct  a  portion 
of  my  Feb.  18  column,  “Lessons  in  CRM.”  This  column 
described  cases  of  identity  theft  made  possible  in  part 
by  weaknesses  in  the  customer  relationship  manage¬ 
ment  software  used  by  Pacific  Bell  and  MCI.  In  one 
case,  someone  had  created  a  Web  account  for  my  Pa¬ 
cific  Bell  services  and  was  changing  my  phone  ser¬ 
vices  without  my  permission.  Pacific  Bell  promised 
to  cancel  that  bogus  Web  account,  but  that  process 
took  weeks,  and  the  company  couldn’t  assure  me  that 
the  offender  wouldn’t  be  able  to  create  another  bogus 
account  after  the  current  one  was  canceled. 

I  assumed,  therefore,  that  anyone  could  create  such 
an  account  with  little  more  than  a  phone  number.  I 
assumed  wrong.  The  only  way  to  complete  the  Web 
registration  process  is  to  confirm  it  by  mail  or  by 

calling  Pacific  Bell  from  the  phone  number 
you’re  registering.  My  mail  is  being  inter¬ 
cepted,  so  it’s  still  a  risky  process  in  my 
rather  unique  circumstances.  But  these  Pa¬ 
cific  Bell  safety  checks  should  be  fine  for 
most  customers. 

It  would  have  been  nice  if  the  person  on 
the  phone  knew  what  checks  were  re¬ 
quired,  and  I  still  believe  that  Pacific  Bell 
should  better  integrate  its  Web  services 
with  the  software  it  uses  for  its  phone  sup¬ 
port.  But  as  for  how  easy  it  is  to  create  a 
bogus  Web  account,  mea  culpa,  and  apolo¬ 
gies  to  Pacific  Bell.  I 


NICHOLAS  PETRELEY  is  a 

computer  consultant  and 
author  in  Hayward,  Calif. 
He  can  be  reached  at 

nicholas@petreley.com. 
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Real-time  Web  data  analysis  is 
gaining  acceptance  for  business 
decision-making,  but  the  complexity 
of  creating  real-time  applications  still 
keeps  most  projects  small.  By  Mark  Hall 

WEB  ANALYTICS 


N  an  era  of  instant  gratification,  it’s  only 
natural  that  IT  managers  are  finding  them¬ 
selves  pressured  to  deploy  real-time  Web  ana¬ 
lytics  systems.  But  beware:  Any  trek  into  the 
Web’s  real-time  world  will  be  one  populated 
by  legacy,  batched  data,  as  well  as  rapid-fire, 
up-to-the-click  information. 

There  are  compelling  reasons  for  using  real-time 
Web  information  to  make  business  decisions.  Many 
of  them  are  related  to  e-commerce  markets,  while 
others  are  emerging  in  product  development  and 
supply  chain  areas.  But  the  complex  nature  of  the 
applications  involved  means  that  most  companies 
are  only  dipping  their  toes  into  real-time  Web  analyt¬ 
ics  waters. 

“It's  the  land  of  pilot  projects,”  quips  Louis  Colum¬ 
ns,  a  senior  analyst  at  AMR  Research  Inc.  in  Boston. 

That’s  because  any  IT  department  that  dives  in 


“must  assume  integration  and  interoperability  as 
core  competencies,”  he  says. 

A  few  companies,  however,  are  wading  more 
deeply  into  the  technology. 

Reaching  Critical  Mass 

COMPANY:  NetFlix.com  Inc. 

REAL-TIME  CHALLENGE:  Give  customers  instant  movie 
recommendations  based  on  current  Web  site  activity  and 
historical  user  data 

Your  critiques  of  films  starring  Jack  Nicholson  or 
Nicole  Kidman  get  thrown  back  at  you  in  real  time 
if  you’re  one  of  the  500,000  subscribers  to  NetFlix.- 
com’s  Web  site.  A  pan,  a  thumbs  up,  past  rentals, 
your  profile  and  current  Web  activity  all  contribute 
to  the  pages  served  up  by  the  “recommendation  en¬ 
gine”  from  the  Los  Gatos,  Calif.-based  online  movie 
services  company. 


Initially,  the  IT  department  started  with  a  com¬ 
mercial  application.  That  work  stopped,  says  Neil 
Hunt,  the  company’s  vice  president  of  e-commerce, 
because  the  canned  software  was  ill-suited  for  evalu¬ 
ating  on  the  fly  the  subjective  world  of  tens  of  thou¬ 
sands  of  movie  critics. 

Yet,  the  capability  was  critical  in  order  for  NetFlix 
to  distinguish  itself  online.  “We  felt  we  needed  to 
own  the  technology,”  says  Hunt. 

So  he  hired  mathematicians  with  C++  experience 
to  write  the  algorithms  and  code  to  define  movie 
clusters,  relate  opinions  to  the  clusters,  evaluate 
thousands  of  ratings  per  second  and  factor  in  current 
Web  site  behavior  to  deliver  a  specially  configured 
Web  page  before  a  site  visitor  can  click  again. 

Hunt  says  NetFlix’s  “significant”  investment  in 
proprietary  technology  was  only  made  after  it  was 
deemed  critical  to  the  company’s  added  value  to 
the  market. 

He  says  the  real-time  analytics  can  also  tell  mar¬ 
keting  managers  what  Web  page  design  is  working 
best  for  a  given  promotion  and  allow  them  to  make 
changes  immediately  based  on  dynamic  feedback. 

“It’s  a  good  tool  for  effective  design,”  he  says. 

Analytics  as  a  Web  Service 

COMPANY:  Infinity  Pharmaceuticals  Inc. 

REAL-TIME  CHALLENGE:  Speed  drug  development  by  facili¬ 
tating  the  process  of  evaluating  new  chemicals 

Although  real-time  Web  analytics  are  mostly  associ¬ 
ated  with  consumer  site  recommendation  engines 
like  the  one  at  NetFlix,  some  rapid-response  software 
is  showing  up  in  critical  applications  for  use  inside 
companies. 

Andy  Palmer,  CIO  at  Infinity  Pharmaceuticals 
in  Boston,  says  his  drug  discovery  company’s  busi¬ 
ness  is  dependent  on  the  underlying  real-time  analyt¬ 
ics  application  that  its  researchers  use  when  generat¬ 
ing  statistical  models  of  how  compounds  will  behave 
in  a  given  chemical  assay.  With  so  many  different 
models,  he  says,  “the  more  real  time  and  interactive 
you  can  be,  the  more  effective  you  will  be.” 

The  toughest  nut  to  crack  for  real-time  Web  ana¬ 
lytics  is  data  integration,  Palmer  says.  This  is  where 
real-time  information  regularly  meets  batched  data. 
For  example,  the  company’s  scientists  constantly 
need  to  integrate  their  database  of  chemical  models 
with  outside  sources  such  as  databases  of  chemical 
compounds. 

Infinity’s  IT  staff  solved  the  problem  by  building  a 
real-time  system  using  Web  services  as  its  applica¬ 
tion  model,  so  XML  interfaces  are  coded  into  every 
program.  The  design  also  includes  a  standardized 
metadata  model,  and  Infinity  maps  its  data  diction¬ 
aries  to  that. 

“That  way,  data  integration  is  done  upfront  instead 
of  after  the  fact,”  Palmer  says. 

User  response  time  is  the  next  big  problem.  “We 
want  to  reduce  latency  to  real  time,”  he  says. 

To  do  so,  Infinity  has  made  a  commitment  to  visu¬ 
alization  software.  “Without  visualization,  the  num¬ 
ber  of  factors  presented  would  be  too  large  to  make 
real  decisions,”  Palmer  says. 

The  visualization  software,  a  package  from  Somer¬ 
ville,  Mass.-based  Spotfire  Inc.,  renders  the  analytic 
output  from  millions  of  compounds.  “As  you  apply 
the  different  predictive  models,  you  change  them 
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and  view  them  dynamically”  in  Spotfire,  says  Palmer. 
“This  is  something  that  used  to  take  weeks,  but  now 
it’s  just  a  few  seconds.” 

Real-Time  Account  Management 

COMPANY:  Cisco  Systems  Inc. 

REAL-TIME  CHALLENGE:  Provide  real-time  account  order 
activity  feedback  to  sales  department 

It’s  not  just  movie  buffs  and  scientists  who  need  to 
see  real-time  information  in  a  meaningful  way.  At 
Cisco,  company  executives  says  that  ideally,  every- 


FOUR  STEPS 
TO  PROJECT 
SUCCESS 

Before  trodding  down  a  real-time  path,  IT 
managers  might  do  well  to  heed  the  follow¬ 
ing  advice  from  Louis  Columbus,  an  analyst 
at  AMR  Research: 

IPIan  for  two  to  six  months  of  imple¬ 
mentation  time. 

2  Expect  substantial  investments  for 

data  integration  work,  high-perfor¬ 
mance  servers  and  storage  subsystems  to 
meet  insatiable  data  storage  requirements. 

Visualization  tools  are  critical 

«J  to  make  massive  data  dumps  under¬ 
standable. 

4  Try  before  you  buy.  Ask  for  refer¬ 
ences  and  a  free  evaluation  period 
before  committing  to  an  analytics  tool. 


one  in  the  business  should  have  access  to  real-time 
information. 

“The  whole  corporation  is  moving  to  real  time,” 
says  Mike  Zill,  director  sales  finance  IT  at  Cisco.  “It’s 
difficult  to  have  the  applications  stay  in  batch  when 
the  architecture  is  message-based.” 

According  to  Zill,  channel  account  managers  in 
the  sales  department  use  a  Web-based  “dashboard,” 
or  graphical  user  interface-based  view,  from  One- 
Channel  Inc.  in  Mountain  View,  Calif.,  that  gives 
them  real-time  views  of  their  accounts’  activities. 
When  a  business  condition  hits  a  predetermined 
threshold,  the  OneChannel  software  triggers  an 
alert,  sending  a  message  or  warning  to  the  user’s 
dashboard. 

For  example,  if  Cisco’s  sales  department  has  a  top- 
10  list  of  new  products  it  wants  sold  through,  say,  In¬ 
gram  Micro,  the  application  will  let  the  Cisco  chan¬ 
nel  manager  know  the  instant  the  distributor’s  sales 
fall  outside  target  levels. 

To  achieve  this,  Cisco  had  to  build  deep  hooks 
into  its  supply  chain,  which  wasn’t  easy,  acknowl¬ 
edges  Zill.  The  firm  has  established  agreements 
with  its  partners  to  receive  point-of-sale  data  via  the 
Internet  or,  in  some  cases,  through  electronic  data 
interchange. 

Most  of  the  data  is  batched.  Few  partners  will 
feed  real-time  point-of-sale  data  to  the  company, 

Zill  says. 

Once  it  receives  the  data,  Cisco  couples  it  with 
real-time,  Web-based  inventory  information  and 
processes  it  using  analytics  software  from  Hyperion 
Solutions  Corp.  in  Sunnyvale,  Calif.  Channel  man¬ 
agers  can  then  query  the  Hyperion  software  in  detail 
through  the  OneChannel  dashboard  to  find  the  un¬ 
derlying  causes  of  any  distribution  problem. 

“The  response  time  is  fast  enough  so  you’re  not 
waiting,”  Zill  says. 

And  that’s  the  essence  of  real  time  for  any  user.  I 


NetFlix’s  RealTime  Reels 

The  company’s  Web  application  suggests  movie  titles  to  users  by  processing  both  their  real-time 
Web  site  activity  and  historical  user  data  and  then  returns  the  results  -  all  within  a  few  seconds. 
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Knowing  When 
Rules  Apply 

Real-time  applications  are  showing  up  everywhere 
inside  companies,  but  not  all  applications  lend 
themselves  to  the  rules-based  world  of  real-time 
analysis. 

Nonetheless,  “people  are  thinking  of  more 
clever  ways  to  do  real-time  work,”  says  Richard 
Lowery,  national  director  of  the  customer  relation¬ 
ship  management  practice  at  Born,  a  Minnetonka, 
Minn.-based  consultancy. 

CLEARING  THE  PIPES 

Robb  Thomas,  communications  manager  at  Cin¬ 
cinnati-based  Roto-Rooter  Services  Co.,  used 
real-time  tools  to  off-set  an  anticipated  increase 
in  wide-area  network  (WAN)  costs. 

The  company's  130  franchises  run  Internet  and 
internal  application  traffic  on  the  corporate  WAN. 
Thomas  set  up  a  proxy  server  last  year  to  manage 
all  of  the  Web  page  requests  so  he  could  run  com¬ 
pany  policy  Web  address  filters  centrally  for  re¬ 
mote  offices. 

Even  with  the  filtering,  adding  the  Web  traffic 
to  the  WAN  bogged  it  down.  But  today's  budget 
realities  nixed  the  idea  of  upgrading  the  network 
backbone. 

Instead,  Thomas  opted  for  a  rules-based  band¬ 
width  allocation  system  from  NetReality  Inc.  in 
Santa  Clara,  Calif.,  that  can  change  bandwidth  lev¬ 
els  in  real  time.  The  rules  for  who  gets  what  band¬ 
width  when  can  be  as  complex  or  as  simple  as  you 
want,  says  Thomas.  But  each  one  should  corre¬ 
spond  to  a  specific  business  criterion,  not  an  item 
on  an  IT  wish  list,  he  says. 

SOUNDING  THE  ALARMS 

Linda  Belanger’s  company  has  been  edging  to¬ 
ward  real-time  alerts  for  its  sales  and  customer 
data.  “On  our  radar  is  to  do  ‘alarm’  reports  so  we 
can  give  instant  information  to  our  sales  force 
about  a  customer  in  his  territory,”  says  Belanger, 
senior  manager  of  decision  support  at  Office  De¬ 
pot  Inc.  in  Delray  Beach,  Fla. 

She  envisions  the  appropriate  pagers  beeping 
with  information  and  instructions  as  soon  as  the 
system  reaches  a  rules-defined  threshold.  In  this 
way,  Belanger  says,  real-time  tools  will  make  her 
company's  sales  force  more  effective. 

But  she  adds  that  while  real-time  updates  to  the 
sales  force  are  a  plus,  staffers  must  still  evaluate 
the  information  before  responding  to  customer 
issues.  And  the  quicker  the  sales  staff  gets  cus¬ 
tomer  data,  Belanger  says,  the  more  effective  it  is 
at  generating  revenue. 

-  Mark  Hall 


Real-time  analytics  turned  customers  of 
one  beauty  products  maker  into  an  R&D 
resource.  Read  about  it  online  at: 

www.computerworld.com/q727996 
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Vision 
peaks 
Volumes 

You  know  it’s  3-D  when  you  can 
walk  around  it.  By  Russell  Kay 


IN  THE  CORNER  OF  A  DIMLY  LIT 

computer  room  at  Actuality  Sys¬ 
tems  Inc.  stands  a  transparent 
globe  with  a  diameter  of  about 
20  in.  —  the  world’s  highest- 
resolution  3-D,  volumetric  display. 

Peering  into  this  high-tech  crystal 
ball,  I  see  what  looks  like  a  thin  green 
ribbon  twisting  around  itself.  At  two 
places  where  there  are  “pockets”  in  the 
ribbon’s  structure  sits  a  white  blobby 
mass  with  several  appendages  that 
fit  neatly  into  the  pockets  (see  right 
photo).  I  can  walk  around  the  globe  and 
look  in  from  the  top  to  see  what  had 
been  obscured  from  a  different  angle. 

Gregg  Favalora,  founder  and  chief 
technical  officer  of  the  Reading,  Mass.- 
based  Firm,  tells  me  the  green  ribbon  is 


THIS  SIMULATION  of  a  plane  flying  over 
h:':s  shows  how  3-D  problems  involving  a 
r  '.mg  environment  can  be  modeled. 


a  representation  of  the  structure  of 
the  human  immunodeficiency  virus 
(HIV);  the  white  object  represents  a 
chemical  molecule  designed  specifi¬ 
cally  to  fit  the  virus’  complex  shape. 

No  other  type  of  display  can  show  so 
completely  how  the  molecule  “docks” 
with  the  virus.  That’s  when  it  hit  me 
that  3-D  visualization  can  significantly 
expand  one’s  understanding  of  a  vir¬ 
tual  object. 

What’s  important  here  is  that  this 
is  a  real  3-D  image,  not  a  stereoscopic 
picture  made  from  two  single  still 
images  and  representing  a  single  view¬ 
ing  point.  Here,  I  can  see  the  3-D  shape 
of  the  image  directly  from  all  sides.  In 
other  words,  I  can  see  it  as  a  volume 
in  space,  which  is  why  this  is  called  a 


THIS  REPRESENTATION  of  HIV  lets  re¬ 
searchers  study  the  virus’  structure  from 
all  angles  and  “test-fit”  protein  molecules. 


volumetric  display.  And  since  much 
of  today’s  research  into  new  drugs  re¬ 
volves  around  structural  issues  such  as 
designing  molecules  to  interact  with 
specific  pathogens,  visualization  such 
as  the  Actuality  display  represents  a 
real  shortcut.  Looking  at  a  2-D  repre¬ 
sentation  of  the  same  image,  I  was 
struck  by  how  little  I  could  see  clearly, 
particularly  spatial  relationships. 

How  It  Works 

A  few  other  volumetric  displays  are 
on  the  market  but  none  with  the  reso¬ 
lution  of  Actuality’s.  The  quality,  or 
resolution,  of  a  volumetric  image  is 
measured  in  a  unit  called  the  voxel,  or 
volume  pixel.  The  Actuality  display 
has  a  resolution  of  768  by  768  pixels  by 
198  planes  by  eight  colors,  for  a  total  of 
116  million  voxels. 

By  comparison,  the  few  other  volu¬ 
metric  displays  I’ve  seen  referenced 
typically  have  only  about  12  planes, 
a  severe  limitation  when  it  comes  to 
showing  detail. 

The  technology  behind  the  display 
is  surprisingly  simple.  Most  other  at¬ 
tempts  at  creating  a  volumetric  display 
involve  multiple  lasers  and  complex, 
often  helical,  semitransparent  screens. 

Inside  that  transparent  sphere, 
Actuality  uses  simple  LCD  projection 
and  a  white  plastic  disc,  approximately 
10  in.  in  diameter,  which  rotates  at 
about  700  rpm.  On  one  side  in  the  base 
is  a  three-LCD  projector  that  uses  a 
normal  projector-type  lamp.  It  flashes 
a  constantly  changing  image  either 
directly  onto  the  disc  or  onto  a  facing 
mirror  that  spins  with  the  disk. 

Behind  that  projector  is  a  dedicated 
digital  signal  processor  running  some 
very  complex  proprietary  mathemati¬ 
cal  algorithms  developed  by  Actuality. 
Each  “frame”  must  be  recalculated  to 
account  for  the  fact  that  the  screen  is 
at  a  different  angle  relative  to  the  pro¬ 
jector  every  time  an  image  is  flashed 
onto  the  screen.  Without  such  trans¬ 
formations,  the  image  would  be  dis¬ 
torted  and  unusable. 

The  image  displays  a  certain  amount 
of  flicker  at  some  places.  Favalora  ex¬ 
plains  that  this  is  because  the  white 
disc  isn’t  perfectly  flat.  He  says  that  in 
the  interests  of  production  simplicity, 
Actuality  is  trying  to  solve  the  problem 
mainly  through  software,  without  re¬ 
quiring  an  expensive,  and  expensively 
aligned,  screen  medium. 

The  display  gets  its  data  over  a  SCSI 
link  from  a  Linux  or  a  Windows  2000 
computer.  Based  on  OpenGL  graphics 
standards,  the  display  can  be  used  with 
most  3-D  software  modeling  programs. 

The  display  is  the  brainchild  of  Fava- 


What’s  in  a  Name? 

3-D  graphics  is  a  confusing  term.  Typi¬ 
cally,  it  means  that  something  is  modeled 
in  3-D  but  displayed  on  a  2-D  screen. 

Yes,  you  can  manipulate  objects  to  see 
hidden  features,  but  you’re  still  looking  at 
a  2-D  representation.  A  few  years  back, 
special  video  cards 
coupled  with  polar¬ 
ized  glasses  could 
give  you  stereo¬ 
scopic  3-D.  A  year 
ago,  I  reviewed  a 
special  flat-screen 
monitor  that  did  the 
same  thing  but  with  a  standard  video 
card  and  without  the  glasses  [Technol¬ 
ogy,  April  30],  But  effective  as  that  was, 
it’s  still  more  an  illusion  of  3-D  than  any¬ 
thing  else:  It’s  just  a  single  view,  as  if  your 
head  is  locked  into  position.  You  can  ro¬ 
tate  the  3-D  object  in  front  of  you.  but 
you  can’t  walk  around  it.  Holograms  also 
give  a  3-D  view,  but  they’re  limited  by  the 
size  of  the  film.  However,  you  can  move 
around  a  holographic  image. 

-Russell  Kay 


PIXELS  OR  VOXELS? 

2-D  screens  show 
picture  elements 
(pixels),  while  the 
Actuality  display 
shows  3-D  volume 
elements  (voxels). 


lora,  who  has  been  playing  with  the 
problems  of  3-D  imaging  since  he  was 
a  child.  Favalora  is  a  1996  graduate  of 
Yale  University  and  founded  Actual¬ 
ity  after  being  named  a  runner-up  in 
MIT’s  $50k  Entrepreneurship  Compe¬ 
tition.  In  2000,  he  was  named  by  MIT’s 
Technology  Review  as  one  of  the  coun¬ 
try’s  100  visionaries  under  35  who  will 
drive  the  future  of  technology.  Actual¬ 
ity  has  eight  employees  and  has  re¬ 
ceived  $2.3  million  in  venture  funding. 

According  to  Favalora,  the  com¬ 
pany  had  planned  to  spend  another 
year  developing  its  display  technology 
before  marketing  it.  But  he  said  there 
is  enough  demand  for  the  current  pro¬ 
totype  and  that  Actuality  is  now  sell¬ 
ing  a  limited  number  at  $65,000  for 
the  hardware,  operating  software  and 
development  kit. 

At  that  price,  there  should  be  a  lot 
of  takers,  such  as  companies  with 
complex  data  visualization  needs  that 
nothing  short  of  a  true  3-D  display 
can  satisfy. 

San  Diego-based  pharmaceutical 
firm  Structural  Genomix  Inc.  is  cur¬ 
rently  a  beta  tester.  Other  interested 
parties  include  medical  and  surgical 
researchers;  oil  and  gas  companies 
with  terabytes  of  complex  geological 
data;  the  military,  which  is  seeking 
ever  more  powerful  simulation  tools; 
computer-aided  design  developers; 
and  architects.  • 
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WebSphere  software 


CODERNAUTS  DISCOVER  WEBSPHERE.  THE  WORLD’S  MOST  POPULAR  INTEGRATION  SOFTWARE. 


WEBSPHERE  for  INFRASTRUCTURE 


|  CONNECTS  MORE  APPLICATIONS,  DEVICES,  PROCESSES  AND  PEOPLE  THAN  ANY  OTHER  SOFTWARE  j 


IT’S  A  DIFFERENT  KIND  of  WORLD. 

YOU  NEED  A  DIFFERENT  KIND  of  SOFTWARE. 
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TECHNOLOGYFUTURE  WATCH 


An  evil  array  of  computer 
viruses,  worms  and  Trojan 
horses  will  in  coming  years 
propagate  to  your  cell  phone, 
invade  your  personal  digital 
assistant  (PDA),  open  back  doors 
into  your  PC  and  more,  experts  are 
forecasting. 

Predicting  what  form  rogue  software 
will  take  is  difficult,  they  say,  but  cur¬ 
rent  trends  offer  clues.  “They  are 
coming  faster,”  says  Peter  Tip¬ 
pett,  chief  technology  officer  at 
TruSecure  Corp.  in  Herndon, 
Va.  “When  we  had  Friday  the 
13th  and  Form,  it  took  a 
virus  two  to  three 
years  to  go  from 
birth  to  being  No.  1 
[in  reported  at¬ 
tacks].  Then,  when 
the  macro  virus  Concept 
came  along,  it  took  two  to 
three  months.  Last  year,  Nimda 
took  22  minutes  to  go  to  No.  1.” 
Although  the  number  of  new 
viruses  introduced  each 
year  is  declining,  “mal¬ 
ware”  is  getting  far  more 
destructive  (see  chart).  It 
increasingly  spreads  by  multiple  vec¬ 
tors,  Tippett  says,  such  as  the  Nimda 
worm,  which  propagated  in  five  ways. 
And  more  viruses  are  being  aimed  at 
Internet  servers,  with  desktop  invasion 
a  secondary  effect. 

“When  you  have  400,000  servers  on 
the  Internet  all  contributing  to  the 
spreading  of  an  infection,  you  get  an 
incredibly  rapid  growth,”  he  says. 


And  the  rogue  software  not  only  can 
spread  in  multiple  ways,  but  it  also  can 
launch  multiple  attacks.  “With  the 
worm  Nimda,  there  were  multiple  pay- 
loads  —  not  just  data  destruction  but 
also  creating  vulnerabilities  and  ex¬ 
ploiting  them,”  says  Vincent  Weafer, 
senior  director  of  security  response  at 
Symantec  Corp.  in  Cupertino,  Calif. 

Indeed,  two  previously  distinct 
groups  —  virus  writers  and  hackers  — 
are  joining  forces  to  cause  double 
trouble.  “Now  we  are  seeing  attack 
tools  used  by  both  sides,”  Weafer  says. 
“What  if  I  take  a  buffer  overflow  ex¬ 
ploit  and  put  that  on  the  back  of  a 
worm  that  goes  looking  for  vulnerable 
systems?” 

Perhaps  the  biggest  boost  to  mal¬ 
ware  distribution  will  come  as  devices 
become  more  programmable  and  con¬ 
nected.  “I  am  particularly  worried 
about  the  merging  of  mobile  phones 
and  PDAs,”  says  Fridrik  Skulason,  a 
virus  researcher  at  Frisk  Software 
International  in  Reykjavik,  Iceland. 
“Sooner  or  later,  someone  will  release 
something  with  the  intent  of  screwing 
up  mobile  phone  communication 
worldwide.” 

Adds  Skulason,  “I  am  also  concerned 
about  ‘slow’  damage  —  viruses  that 
fiddle  with  data,  changing  a  single 
number  in  a  spreadsheet  or  changing  a 
word  or  two,  like  changing  ‘probably’ 
to  ‘probably  not’  —  in  a  document. 

In  those  cases,  even  a  good  set  of  back¬ 
ups  may  not  help,  because  the  data 
corruption  might  have  gone  on  for  a 
long  time.” 


Viruses,  worms  and  Trojan  horses  will  become  more 
powerful,  more  pervasive  and  faster.  By  Gary  H.  Anthes 
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The  Rise 
Of  Malware 


YEAR 

NEW  KNOWN 
VULNERABILITIES 
ALL  OPERATING 
SYSTEMS 

KNOWN 

VIRUSES 

1998 

262 

40,000 

1999 

417 

48,000 

2000 

1,090 

55,000 

2001 

2,437 

59,000 

SOURCES:  CERT  COORDINATION  CENTER.  PITTSBURGH: 
TRUSECURE  CORP..  HERNDON,  VA. 


Graham  Cluley,  a  senior  technical 
consultant  at  Sophos  Anti-Virus  PLC 
in  Oxford,  England,  predicts  a  rise  in 
the  use  of  “backdoor  Trojan  horses” 
sent  surreptitiously  by  e-mail.  “You 
run  the  program  and  that  opens  a  door, 
which  people  on  the  outside  can  use  to 
steal  your  passwords,  destroy  files  and 
so  on,”  he  says.  “With  the  increased 
adoption  of  always-on  connections, 
more  and  more  home  and  office  users 
will  get  hit  by  them.” 

How  bad  could  it  get?  “Sometime  in 
the  next  five  years,  we  will  see  a  major 
outage  of  at  least  one  service  —  for  ex¬ 
ample,  e-mail  or  the  Web  —  or  one 
part  of  the  Internet  due  to  malware,” 
predicts  Richard  Ford,  chief  technolo¬ 
gy  officer  at  Cenetec  LLC  in  Boca  Ra¬ 
ton,  Fla.  He  declines  to  give  details  but 
says,  “The  Internet  is  a  lot  more  fragile 
than  we  sometimes  think  it  is.  We 
should  think  carefully  about  the  differ¬ 
ent  ways  the  Internet  in  general  could 
be  attacked  and  design  around  them.” 

Indeed,  new  technologies  such  as 
the  Simple  Object  Access  Protocol  and 
the  Universal  Discovery,  Description 
and  Integration  standard  will  provide 
entirely  new  ways  for  computers  to  in¬ 
teract,  says  Sarah  Gordon,  a  senior  re¬ 
search  fellow  for  security  response  at 
Symantec.  “With  that  new  interaction 
comes  an  entirely  new  universe  for  the 
malware  author  to  explore,”  she  says. 
“We  need  to  consider  this  as  we  create 
standards  and  deploy  systems  which 
rely  heavily  on  these  technologies.” 

Despite  the  gloom  and  doom,  pro¬ 
tective  measures  will  improve,  some 
experts  say.  For  example,  Ford  says, 
“companies  like  Symantec  are  begin¬ 
ning  to  ship  parts  of  a  ‘Digital  Immune 
System,’  which  allows  computers  to 
grant  ‘herd  immunity’  to  computers 
whenever  a  new  virus  is  discovered,  all 
with  no  human  intervention.  While  the 
technology  is  still  in  its  early  stages,  it 
bears  a  great  deal  of  promise.”  I 
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Certification  Value  More 

Political  Than  Practical 


Much  of  what  security  tests  cover  doesn't  apply  in 
the  real  world  —  but  training  keeps  staff  morale  high 


BY  VINCE  TUESDAY 

Some  months  ago,  I  proudly 
earned  my  Global  Informa¬ 
tion  Assurance  Certification 
(GIAC)  in  network  intrusion 
detection  from  the  Bethesda, 
Md.-based  SANS  Institute.  I  was  im¬ 
pressed  by  the  technical  depth  of  the 
course  and  by  the  difficulty  of  the  eval¬ 
uation  process. 

I’m  confident  that  any  potential  hires 
with  this  certification  know 
one  end  of  a  TCP  packet 
from  the  other.  But  whether 
they  would  ever  get  to 
use  that  knowledge  in  a 
commercial  environment 
is  a  different  question.  The 
certification  process  goes 
much  technically  deeper 
than  any  security  profes¬ 
sional  ever  needs  to  in  our 
environment. 

That  depth  comes  with  a 
price,  in  terms  of  breadth. 

To  cover  network  intru¬ 
sion-detection  systems  in 
such  detail  means  that 
host-based  detection  sys¬ 
tems  and  other  subjects 
are  skimmed  over.  I  re¬ 
cently  completed  my  Certified  Infor¬ 
mation  Systems  Security  Personnel 
(CISSP)  exam  and  found  that  it  has 
gone  to  the  opposite  extreme,  sacrific¬ 
ing  much-needed  depth  for  breadth.  So 
are  such  certifications  worth  it?  Per¬ 
haps,  but  not  for  the  reasons  you  read 
about  in  the  marketing  literature. 

The  Claims  vs.  the  Reality 

The  SANS  Institute  has  data  showing 
that  people  with  a  GIAC  earn  12%  more 
than  staffers  without  the  qualification. 
This  is  a  cute  statistic,  but  one  with  ques¬ 
tionable  meaning:  Better-funded  com¬ 
panies  are  more  likely  to  send  their  em¬ 
ployees  for  GIAC  certification  and  are 
more  likely  to  pay  them  better.  Profes¬ 
sionals  with  the  certification  are  gener¬ 
ally  more  senior  and  experienced  than 
noncertified  staff.  This  doesn’t  prove 
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that  the  GIAC  raises  your  income. 

I’d  like  to  see  statistics  on  the  salary 
levels  of  staffers  who  fail  their  GIAC 
test,  but  I  know  I  won’t  anytime  soon. 
(If  you’ve  ever  offered  a  higher  salary  to 
new  hires  based  on  their  certifications, 
I’d  love  to  hear  about  it  in  the  Security 
Manager’s  Journal  forum.) 

Despite  the  inflated  salary  claims,  the 
SANS  courses  offer  good  training.  We 
have  sent  staffers  to  courses  and  they 
have  enjoyed  themselves 
and  improved  their  techni¬ 
cal  knowledge. 

However,  a  review  of  job 
postings  will  show  that  the 
GIAC  isn’t  well  known.  I 
found  2,990  security  job 
listings,  of  which  seven 
mentioned  GIAC  and  11 
mentioned  SANS.  A  quali¬ 
fication  requested  for  0.6% 
of  jobs  isn’t  going  to  set  the 
world  on  fire. 

There  is  one  certification 
that  does  a  little  better.  The 
CISSP  was  mentioned  in  75 
job  descriptions,  or  2.5%  of 
the  jobs.  That’s  better,  but 
it’s  still  not  great.  A  more 
interesting  statistic  is  that 
more  than  70%  of  the  jobs  that  required 
a  GIAC  also  required  the  CISSP. 

Friends  told  me  of  recruitment  agents 
who  refused  to  put  their  resumes  for¬ 
ward  for  appropriate  jobs  because  they 
didn’t  have  their  CISSP.  I  also  kept  see¬ 
ing  CISSP  books  sticking  out  of  peo¬ 
ple’s  bags  on  the  subway,  so  I  decided  to 
pursue  the  certification  myself. 

The  CISSP  is  administered  by  the  In¬ 
ternational  Information  Systems  Secu¬ 
rity  Certification  Consortium  Inc.,  also 
known  as  (ISC)2.  It  offers  weeklong 
exam  preparation  courses,  but  because 
no  courses  in  my  area  were  convenient, 
I  relied  on  books  for  my  training. 

I  had  only  a  few  weeks  to  prepare  be¬ 
fore  the  next  exam.  It  helped  that  I’ve 
had  industry  experience  and  that  I 
come  from  an  academic  background. 
The  exam  focuses  on  military,  govern¬ 


ment  and  academic  security,  all  at  a 
very  shallow  depth. 

I  enjoyed  learning  how  high  fences 
must  be  to  deter  intruders  and  the  de¬ 
tails  of  all  the  different  kinds  of  Fire  ex¬ 
tinguishers  a  data  center  could  have. 
But  this  information  is  irrelevant:  I’ve 
never  worked  anywhere  that  had  a 
fence,  and  I’ve  been  never  responsible 
for  fire  extinguishers. 

Of  Academic  Interest 

A  tenth  of  the  content  is  devoted  to 
security  models  and  architectures.  It’s 
interesting,  in  a  purely  academic  way, 
to  review  some  historical  attempts  to 
formalize  security  approaches,  all  of 
which  are  monolithic  and  inflexible 
systems  designed  for  military  applica¬ 
tions.  We’d  never  be  able  to  implement 
anything  like  this  in  our  environment. 
Anyway,  despite  the  expense  and  com¬ 
plication  of  these  systems,  they  were 
never  truly  secure.  This  doesn’t  bode 
well  for  the  informal  systems  used  in 
commercial  environments. 

The  exam  consists  of  250  multiple- 
choice  questions.  The  (ISC)2  allows  six 
hours  to  complete  the  exam,  but  I  was 
done  in  less  than  half  the  time. 

(ISC)2  uses  a  rigorous  nondisclosure 
agreement  to  discourage  discussion  of 
exam  content.  The  cynic  in  me  won¬ 
ders  if  this  helps  it  keep  costs  down  by 
allowing  it  to  reuse  the  same  exam  year 
after  year.  The  lack  of  current  material 
in  the  test  I  took  and  the  use  of  easy-to- 
mark  multiple-choice  questions  doesn’t 
contradict  this  impression. 

Unlike  its  old  exams,  the  (ISC)2’s 
code  of  ethics  is  public.  One  of  these 
rules  requires  that  I  “advance  and  pro¬ 
tect  the  profession,”  possibly  by,  among 
other  things,  hiring  those  who  are  certi¬ 
fied,  all  else  being  equal.  Thankfully, 
this  is  only  a  suggestion  and,  of  course, 
all  other  things  are  never  equal.  But 
surely  a  good  certification  shouldn’t 
need  to  push  people  to  promote  it? 

There  are  areas  of  the  certification 
that  I  do  like.  Every  three  years,  I  must 
earn  continuing  professional  education 
credits  to  keep  my  certification  current. 
I  could  even  earn  some  by  having  this 
article  published  —  if  I  could  get  it  into 
the  system  without  (ISC)2  connecting 
my  pseudonym  with  my  real  name. 


SECURITYBOOKSHELF 

Of  the  three  books  I  used  to  study  for 
the  CISSP,  the  best  was  The  CISSP 
Prep  Guide:  Mastering  the  Ten 
Domains  of  Computer  Security, 
by  Ronald  L.  Krutz,  Russell  Dean  Vines 
and  Edward  M.  Stroz  (John  Wiley  & 
Sons,  2001).  It  covered  the  information 
required,  and  I  found  no  major  errors. 

CISSP  Exam  Cram,  by  Mandy 
Andress  (The  Coriolis  Group,  2001), 
was  the  next  most  useful.  Each  chapter 
concluded  with  links  for  further  reading. 

CISSP  All-in-One  Exam  Guide, 
by  Shon  Harris  (Osborne  McGraw-Hill, 
2001),  was  worth  buying  for  the  prac¬ 
tice  exams  on  the  enclosed  CD,  but  the 
book  itself  included  some  very  confus¬ 
ing  explanations  and  wasn’t  very  useful. 

Had  I  more  time  to  study,  I  would 
have  used  the  above  as  study  aids  and 
instead  relied  on  Security  Engineer¬ 
ing:  A  Guide  to  Building  Depend¬ 
able  Distributed  Systems,  by  Ross  J. 
Anderson  (John  Wiley  &  Sons,  2001), 
as  my  primary  resource.  It  covers  most 
CISSP  exam  subjects  and  includes 
anecdotes  based  on  real  experience. 


LINKS: 


www.giac.org/qanda.php:  Here’s  a 
link  to  the  SANS  Institute’s  GIAC  salary 
data  and  the  pay  increases  it  associates 
with  the  certification. 
www.isc2.org:  Visit  the  (ISC)2  site 
for  more  information  on  the  CISSP. 


Publishing  encourages  people  who  have 
the  certification  to  help  others  and 
share  knowledge. 

With  all  the  flaws  I’ve  mentioned, 
you  might  think  that  I  won’t  be  sending 
my  staffers  to  be  certified.  However, 
while  I  don’t  think  the  CISSP  experi¬ 
ence  will  be  useful  in  their  daily  work, 
it  should  fill  in  any  missing  theoretical 
background  and  provide  an  under¬ 
standing  of  common  jargon. 

But  the  real  value  for  my  staffers  is 
for  their  resumes  and  their  morale.  My 
team  members  are  bright,  so  they  will 
stroll  through  this  exam  and  get  a  boost. 
Paradoxically,  I  feel  that  improving  my 
staff’s  chance  to  get  other  jobs  will  en¬ 
courage  them  to  stick  around:  If  they 
feel  their  current  position  increases 
their  skills  and  experience  and  widens 
their  next  choice,  then  perhaps  they 
will  stick  with  it.  ► 


Link© 


Discuss  this  week's  column  and 
catch  up  on  the  latest  security 
developments  online  at: 

www.computerworld.com/q?q2000 


■  Thi  v, .  l,  ournal  is  written  by  a  real  security  manager,  “  Vince  Tuesday,"  whose  name  and  employer  have  been  disguised  for  obvious  reasons.  Contact  him  at  vince.tuesday@hushmail.com  or  go  to  the  Security  Manager’s  Journal  forum. 


When  your  business  is  online,  sealed  documents,  signatures  and  handshakes  no  longer  work. 

Let  RSA  Security  bring  authenticity  to  your  e-business. 


SECURITY- 


The  Most  Trusted  Name  in  e-Security' 


www.rsasecurity.com 
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HOT  TRENDS  &  TECHNOLOGIES  IN  BRIEF 
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Random  Numbers 


DEFINITION 
A  random  number  can’t  be  pre¬ 
dicted  in  advance.  Thus,  we  can 
define  only  what  a  random 
number  is  not,  not  what  it  is. 
Random  numbers  can  be  pro¬ 
duced  by  physical  processes, 
such  as  throwing  a  die,  flipping 
a  coin  or  counting  intervals  be¬ 
tween  radioactive  decay  events. 
By  itself,  software  can’t  generate 
truly  random  numbers;  instead, 
it  creates  what  are  called 
pseudorandom  numbers,  start¬ 
ing  from  a  single  random  “seed.” 


BY  RUSSELL  KAY 

E  think  oi-  ran¬ 
dom  numbers 
as  being  some¬ 
how  arbitrary 
and  unknowable  in  advance. 
Mathematically,  a  given  string 
of  numbers  is  random  if  there 
is  no  shorter  way  to  express 
the  string  than  the  string  it¬ 
self.  Thus,  any  sequence  of 
numbers  produced  by  a  calcu¬ 
lation  or  a  formula  can’t  be 
truly  random. 

Another  way  to  think  of  this 
is  that  a  string  is  random  if 
you  can’t  compress  it.  This  de¬ 
finition  excludes  pi  (3.14 . . . ) 
because  a  computer  can  re¬ 


produce  a  few  billion  digits  of 
pi  by  applying  a  very  short 
formula:  a  circle’s  circumfer¬ 
ence  divided  by  its  diameter. 
Thus,  you  can  compress  a  bil¬ 
lion  digits  into  a  short,  simple 
formula:  C/d.  Unfortunately, 
just  because  you  can’t  find  a 
program  that  can  compress  a 
given  sequence  doesn’t  mean 
that  there  isn’t  one  that  some¬ 
one  may  discover  next  month. 

Intuitively,  we  equate  ran¬ 
domness  with  a  lack  of  dis¬ 
cernible  patterns,  but  even 
this  isn’t  enough,  because  ran¬ 
dom  processes  will  sometimes 
produce  short  sequences  that 
appear  to  be  nonrandom. 


We  care  about  random 
numbers  because  they  are 
very  useful  in  statistical  appli¬ 
cations,  in  testing  procedures 
and  software,  and  most  espe¬ 
cially  in  cryptography. 

The  only  truly  unbeatable 
cryptographic  system  uses 
what’s  called  a  one-time  pad: 
a  string  of  random  numbers  or 
letters  used  as  a  key  to  encode 
a  message  through  some  kind 
of  transformation.  If  the  pad  is 
used  only  once  and  is  truly 
random,  it  can  never  be  bro¬ 
ken.  Use  the  same  pad  twice, 
however,  and  it’s  no  longer  un¬ 
breakable  —  at  least  in  theory. 

Howto  Make  a  Random  Number 

During  World  War  II, 

British  code  clerks  created 
random  numbers  for  one-time 
pads  using  a  method  akin  to 
that  used  for  drawing  num¬ 
bers  for  a  bingo  game  or  lot¬ 
tery  today  —  by  drawing  them 
out  of  a  hat  or  a  machine  that 
scrambles  their  order. 

That  method  worked  but 
was  slow  and  labor-intensive. 
Today,  we  use  software  pro¬ 
grams  called  pseudorandom 
number  generators  that  take 
an  input  value  and  perform  a 
series  of  transformations  and 
procedures.  The  input  value 
must  be  truly  random  and  is 
normally  based  on  some  un¬ 
predictable  real-world  event. 

Several  physical  processes 
can  be  used  to  create  random 
numbers.  One  method  uses 
radioactive  decay,  which  cur¬ 
rent  physical  theory  assumes 
to  be  random.  HotBits,  an  In¬ 
ternet  resource,  generates  ran¬ 
dom  numbers  by  timing  suc¬ 
cessive  particle  pairs  in  radio¬ 
active  decay  detected  by  a 
Geiger-Miiller  tube. 

Since  1999,  Intel  Corp.  has 
supplied  a  hardware-based 
random  number  generator  for 
use  with  its  8xx  series  of  CPU 
support  chip  sets.  Implement¬ 
ed  in  the  Intel  82802  Firmware 
Hub  Device,  the  generator  uses 


thermal  noise  from  a  resistor 
to  produce  a  random,  non- 
deterministic  and  nonrepeat¬ 
ing  stream  of  bits. 

Perhaps  the  oddest  source 
for  random  numbers  is  lava 
lamps  —  yes,  lava  lamps,  those 
lit-from-below,  tapered  glass 
bulbs  with  colored  blobs  of 
moving  liquid  that  were  pop¬ 
ular  in  the  1960s  and  1970s. 
Their  use  for  random  numbers 
was  devised  by  researchers 
Robert  G.  Mende  Jr.,  Landon 
Curt  Noll  and  Sanjeev  Sisodiya 
at  Silicon  Graphics  Inc.  in 
Mountain  View,  Calif.,  and 
was  dubbed  “lavarand.”  Noll 
and  his  colleagues  decided 
that  the  unpredictably  rising 
and  falling  blobs  in  a  lava 

The  Randomest 
Number  of 
Them  All? 

“THERE’S  AN  OLD  MATHE¬ 
MATICIAN’S  JOKE  that  a  few 
decades  ago,  statisticians  were 
concerned  about  the  random 
number  tables  they  had  to  use. 
They  were  difficult,  ungainly 
and  just  a  pain.  So  a  number  of 
people  got  together  and  decid¬ 
ed  that  if  they  could  find  out 
what  the  most  random  number 
is,  they  could  just  use  that  and 
lose  all  those  thick  books  of 
random  numbers.  After  much 
work,  they  found  out  that  the 
random  number  is  17. 1  won't 
bore  you  with  the  proof  - 
much.  The  proof  shows  that 
the  random  number  cannot  be 
larger  than  17  and  then  shows 
that  it  cannot  be  less  than  17. 
Therefore,  it  must  be  17.  The 
flaw  in  this  proof  is,  of  course, 
obvious." 

-  Jon  Callas,  “Using  and 
Creating  Cryptographic- 
Quality  Random  Numbers” 
(1996) 

( www.merrymeet.com/jon/ 
usingrandom.html ) 


lamp  would  make  a  conve¬ 
nient  source  of  randomness. 
Their  process  for  generating 
random  numbers  is  as  follows: 

A  digital  camera  periodical¬ 
ly  photographs  a  set  of  six  lava 
lamps,  adding  its  own  elec¬ 
tronic  noise  to  the  data.  The 
921,600  bytes  of  the  original 
image  are  compressed  and 
scrambled  into  a  140-byte 
packet,  which  then  serves  as 
the  seed  value  for  a  software- 
based  pseudorandom  number 
generator.  “While  any  good 
chaotic  source  could  be  used, 
we  favor  lava  lamps,  in  part 
because  they  are  cool,”  the  re¬ 
searchers  say. 

The  importance  of  genuine¬ 
ly  random  seeds  is  illustrated 
in  “Generating  a  Truly  Ran¬ 
dom  Number”  ( http://cobol 
report.com/columnists/leif/ ),  a 
report  by  Leif  Svalgaard.  He 
notes  that  “as  the  World  Wide 
Web  was  gaining  broad  public 
appeal,  the  need  for  secure 
transmittal  of  payment  infor¬ 
mation  (such  as  credit  card 
numbers)  became  evident. 
Netscape  Communications 
Corp.’s  browser  began  to  use 
the  Secure  Sockets  Layer 
(SSL)  for  such  transactions. 
Basically,  SSL  protects  com¬ 
munications  by  encrypting 
messages  with  a  secret  key  — 
a  large,  random  number.” 

SSL  security  depends  en¬ 
tirely  on  the  unpredictability 
of  that  number,  but  in  1995, 
two  researchers  found  that  the 
Netscape  browser  was  gen¬ 
erating  its  random  numbers 
using  just  the  time  of  day  and 
the  identification  numbers 
of  the  process  and  its  parent 
process.  They  then  cracked  the 
code  in  less  than  a  minute.  I 


Quick 

Link© 


Check  out  a  com¬ 
plete  list  of  Technol¬ 
ogy  QuickStudies  at 
our  Web  site: 


www.computerworld.com/q?q3000 


For  links  to  more  information  about  random 
numbers,  visit  our  Web  site: 

www.computerworld.com/q7q28412 


A  .  there  technologies  or  issues  you  would  like  to  learn  about  in  QuickStudy?  Please  send  your  ideas  to  quickstudy@computerworld.com. 
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WOMEN  IN  TECHNOLOGY  INTERNATIONAL 


Join  us  at  the ... 

W1T1  Smart  Partnering 

Conference  &  Expo 

April  8-10 

The  Fairmont  Motel  Dallas,  Texas 

Access  to  Experts ,  Strategies  &  Technologies 

Keynote  Speakers  Include: 

►  Dr.  Karen  Stephenson,  President  of  NetForm;  Professor,  Harvard 

►  KARENANN  A.  TERRELL,  Director  of  eConnect  Platform,  DaimlerChrylser  Corporation 

►  Louise  O'Brien,  Vice  President  of  Corporate  Business  Development,  Dell 

►  Julie  Spicer  England,  Vice  President,  Texas  Instrument 

►  REBECCA  Rhoades,  Vice  President  &  CIO,  Raytheon 

ACCESS  THE  BENEFITS  OF  ATTENDING 

►  Access  to  a  community  of  top-tier  professional  women  making  critical  decisions 
and  valuable  contributions  to  the  industry-at-large. 

►  Advance  your  career  and  business  with  strategies,  direction  and  professional  connections. 

►  Attendees  who  include:  Top  CTOs,  CEOs,  CFOs,  Vice  Presidents  of  IT,  Systems  Engineers, 
Business  Developers,  Sr.  Recruiters,  Corporate  Diversity  Staff,  Heads  of  Fortune  500 
HR  Departments  and  many  others... 

W1T1  fastTrack  Career  Fair  &  expo  -  FREE 

Access  to  hands-on,  how-to  technology  demos  and  a  great  opportunity  to  advance  your 
career-  Bring  Your  Resume! 

Before  there’s  success,  there’s  access. 

For  more  information  or  to  register,  visit  our  website  www.witi.com 

or  call:  1-800-334-9484. 

Mark  Your  Calendar... 

AA/1T1  7th  Annual  Silicon  Valley  Smart  Partnering 
Conference  &  Expo 


June  18-20  ▼  Santa  Clara  Convention  Center  ▼  Santa  Clara,  CA 
Plan  now  to  attend. 
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Advancing  Women  Through  Technology 
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IT  CAREERS 


Fiesta^TecKNet 

Information  Technology:  Window  to  the  Future 


Henry  B.  Gonzalez  Convention  Center 
San  Antonio,  Texas  |  April  22  -  24, 2002 


Co-Sponsored  by  the  AFCEA  Alamo 
Chapter,  AFCEA  International,  and 
the  Billy  Mitchell  Chapter  of  the 
Association  of  Old  Crows 


0% 
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For  information  contact 
Terry  Rogers  at 
trogers@afcea.org  or 
(703)  631-6238 


Registration  and 
Program  Details 

www.afcea.org 


Who  Should  Attend: 

•  Military,  Medical, 
Technology  and  Law 
Enforcement  Professionals, 
IT  Professionals, 
Communicators,  and 
Intelligence  Professionals 

Featured  Speakers: 

•  Gen  Robert  "Doc" 
Foglesong,  USAF  (invited) 
Vice  Chief  of  Staff 
United  States  Air  Force 

•  PaulChiapparone 
Executive  Vice  President  of 
Operations 

EDS 

•  Gen  Ralph  E.  Eberhart, 
USAF  (invited) 

Commander  in  Chief 
U.S.  Space  Command 


Panels: 

•  Information  Assurance/ 
Information  Operations 
Moderator: 

LtGen  Michael  V.  Hayden, 

USAF 

Director 

National  Security  Agency 

•  Information  Technology 
Moderator: 

Dr.  Anthony!  Tether 

Director 

Defense  Advanced 
Research  Projects  Agency 

•  Homeland  Security 
Moderator: 

Lt  Gen  Kenneth  A. 
Minihan,  USAF  (Ret.) 
Former  Director 
National  Security  Agency 
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fry  Jofc  Fair 


Sponsored  By;  IDG  Recruitment  Solution* 

April  15, 2002 
Holiday  Inn  City  Centre 
300  E.  Ohio  St. 
Chicago,  IL 
2  PM  -  7PM 

Voor  Future  Start?  Here! 

www.PICKDiversity.com 


Who's  Hiring?  'NellMart< 

NOVELL  DainilerChrysler  EXCEL/Cargill 
Raytheon  Andrew  Corporation  STARBUCKS 
injc  Washington  Mutual 

Allied  Insurance  CVS/PHARMACY 


PeopleSoft 

Consulting 

Allstate 

DesMoines 

Partnership 

AND  MOREil 


Check  out  our 
WITI  FastTrack 
Supplement  today 


WITH 


7astTrack 


If  organizations  want  to  flourish  in  the  global  economy,  leaders 
need  to  nourish  their  employees.  Our  Women  in  Technology 
International  (WITI)  FastTrack  coverage  will  cover  the  trends  and 
techniques  of  leading  companies  around  the  United  States.  If 
you're  interested  in  a  top  IT  environment  offering  first-class 
treatment,  check  out  WITI  FastTrack.  The  list  below  offers  just  a 
sample  of  the  exceptional  employers  featured  in  this  supplement. 

•  CSC 

•  Capital  One 

•  Raytheon  Company 

•  Advance  Micro  Devices  (AMD) 

•  SBC 

•State  Farm  Insurance 

•  Wal-Mart  ff|| 

For  more  information  on  WITI  FastTrack,  please  call  Janis  Crowley  at 
1-800-762-2977  ext.  7607,  or  email  at  janis_crowley@itcareers.net. 


The  tech  game  has  changed. 


How  you  Will,  hasn  ’  t. 


The  tech  game  can  change  all  it 
wants  to,  but  savvy  technology 
professionals  still  know  how  to  win 
with  Dice.  Show  change  who’s  the 
boss.  Visit  Dice.com  today. 


©2002  Dice  Inc. 


COMPUTER 

Ascential  Software  has  job 
opportunities  in  the  following 
locations: 

California  (Los  Gatos,  Oakland); 
Massachusetts  (Westboro);  and 
in  other 

areas  across  the  United  States: 

■  Software  Engineers 
(All  Levels) 

*  Database  Administrator 

■  Development/Engineering/ 
Project  Managers 

‘  Programmer  Analysts 

*  Systems  Analysts 

■  Technical  Support  Engineers 

■  Sales  Engineers 

For  immediate  consideration, 
send  your  resume  with  salary 
requirements  to: 

Ascential  Software  Corporation 
50  Washington  Street 
Westboro,  MA  01581 

Or  e-mail  to: 

staffing  @  ascentialsoftware.com 

See  our  Web  site  for  additional 
openings: 

www.ascentialsoftware.com. 

EOE 

M/F/D/V.  No  phone  calls  please. 


TO  HIRE. 

(P  careers.com 


WITH  US. 
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IT  CAREERS 
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careers.com 
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careers 


Technical  Publications  Writer: 
Write/edit  technical  publications 
re  computer  systems  installation, 
maintenance  &  operations: 
organize  materials  &  complete 
writing  assignments  to  assure 
clarity,  conciseness,  style  & 
terminology.  Req  BA  in  English 
or  related.  Hrs:  8a-5p,  M-F.  Send 
resume  to  Microlearning,  1395 
S.  Marietta  Pkwy,  Bldg  200  #234, 
Marietta.  GA  30067.  Ref  RR 


Programmer  Analyst.  Using  AS/ 
400,  to  analyze,  develop  &  inte¬ 
grate  local  solutions  for  local 
systems  enhancements,  prepare 
tech,  specs,  for  devlp't  of  pro¬ 
grams,  periorm  research  &  tech, 
analysis  for  existing  systems, 
program  and  modify  existing 
systems,  etc.,  using  COBOL 
and/or  RPG  IV,  CL,  SQL  and 
AS/400  database,  development 
tools  and  utilities.  Requires 
bachelor's  degree  in  IT  related 
field  and  2  years  exp.  40  h/wk. 
Position  in  Atlanta.  Resumes  to: 
Coca-Cola  Enterprises,  ACF 
HR,  PO  Box  723040,  Atlanta, 
GA  31 139-0040.  EOE. 


Programmer/ Analyst  (Jacksonville, 
FL):  Analyze,  design,  develop, 
implement  &  maintain  main¬ 
frame  legacy  applications  on 
3270  systems  &  distributed  data¬ 
base  applications.  Work  w/ 
DB2,  CICS,  JAVA,  C++,  COBOL, 
COBRA,  RMI,  XML  &  MQSeries 
for  Java  API  for  integration 
w/legacy  applications.  Req,  B.Sc. 
in  C.S.,  Electronic  Engineering 
or  other  related  field  +  2  yrs  exp. 
in  job  offered.  Resume  to:  HR 
Manager,  SoftTech,  Inc.,  6025 
The  Corners  Pkwy,  Suite  204, 
Norcross,  GA  30092 


Software  Engineer:  Analysis, 
design  &  development  of  online 
&  batch  transaction  processes  & 
commercial  &  bus  web  apps 
using  CASE  tools,  4GLS,  Visual 
Interdev,  XML,  SQL,  ASP. 
PL/SQL,  JavaScript  &  VBScript 
in  DB2,  Oracle  &  SQL  Server  en¬ 
virons  for  multi  platforms  (Win, 
MVS,  UNIX,  DOS)  running  on 
IBM  &  Sun  Sparc  Ultra  II.  Req. 
BS  in  comp,  sci,  engg,  or  related 
field  &  3yr  exp.  including  large 
volume  online  production  & 
reconciliation  sys  &  exp.  w/CICS, 
DB2  &  Oracle.  Resumes  to: 
N.Vuppula,  Software  Services 
Resources,  3574  Old  Milton 
Pkwy.,  Alpharetta,  GA  30005 


SW  Eng’rs:  Rsrch,  dsgn,  devlp, 
test  &  implem't  internet  SW 
security  systems  w/  C/C++, 
Psec,  PKI,  and  PPTP  protocols 
on  SCO  Open  Unix  envir'mt  & 
NT;  Dsgn  web-based  interface  & 
upgrade  sec.  sys.  w /  OracleSi, 
C/C++,  VC++,  JDK1.2,  ASP. 
ADO  on  SQL  Svr.  40h/w,  8-5, 
BSEE  or  foreign  equivl’t  &  2  yr 
wk  exp  in  job/any  posit’n  involv’g 
C/C++,  Psec/JDK1.2.  Resume 
toJastech,  Inc.jti02@yahoo.com 
/fax:  904-642-1890. 


Database  Administrator: 
Wanted  by  NJ-based  co.  with  job 
loc.  in  Sarasota,  Florida.  Must 
have  B.S.  in  C.S.,  Math.,  Eng.  or 
rel.  field,  with  3  yrs.  exp. 
as  System  Analyst/  Software 
Consultant  or  rel.  occupation  &  3 
yrs.  exp.  with  database  design 
and  3  yrs.  exp.  utilizing  Informix. 
Respond  to:  hr@jtax.com,  HR 
Director,  Jackson  Hewitt,  Inc., 
339  Jefferson  Road,  Parsippany, 
NJ  07054 


™  Kama  Consulting  Inc. 

TOP  $$'s,  W2  or  1099 

We  are  a  fast  growing 
Consulting  company  based 
in  New  Jersey. 
Excellent  opportunities  for 
Programmers, 

Systems  Analysts,  DBAs. 

Sun  Solaris  System  Admins, 
Natural,  Powerbuilder, 
ADABAS,  ORACLE,  SYBASE, 
PROGRESS,  COBOL 
TCP/IP,  Delphi/VB,  Windows  NT 

Send  your  resume  to 
Rod  McFadden 
Kama  Consulting 
Fax:201-934-7166 
EmaikKamaco®  aol.com 


Software  Engineer  Sr.-  design 
&  implement  JTAPI,  ACD,  &  TAPI 
service  providers  to  facilitate 
Java  &  C/C++  developers  to 
write  telephony  programs. 
Consult  with  engineers  & 
scientists  to  design  the  architec¬ 
ture  of  the  telephony  system  & 
interfaces  between  hardware  & 
software.  Must  have  PhD  in 
Computer  Science  or  Engineering 
plus  2yrs  related  job  exp.  Please 
fax  resumes  to  MECA:  609-91 9- 
4345. 


Precious  Metal  Fabrication  comp, 
req.  Prog.  Analyst  w/BS  deg.  & 
2  yrs.  exp.  or  its  equivalent  to 
design,  develop,  implement  & 
modify  Financial,  inventory,  shop 
floor  business  appl.  &  Txbase 
Manufacturing  software  in  client 
svr.  Unix  Environment  using 
Sybase  &  APT  frontend.  Devel¬ 
opment  of  Software  using  DWB, 
APT,  SQR.  Work  with  Unix 
environment  incl.  SUN  servers/ 
workstations,  Intel  PC  systems, 
Sybase  and  TXBASE.  Maintain 
users  accounts,  backup,  restore 
system  data.  Equivalent  can  be 
based  on  edu.  &  exp.  eval.  Travel 
&  relocation  will  be  req.  anywhere 
in  the  U.S.  as  assigned.  Send 
Res.  to  Attn:  Recruiter  Handy  & 
Harman,  1770  Kings  Highway, 
Fairfield,  CT  06430. 


Computer  Programmer  (Chief) 
(NJ)-Resp.  for  overseeing  the 
prep,  of  comp,  programs  to 
process  financial  data  for  finan¬ 
cial  modeling  &  portfolio  &  fund 
analysis.  Interface  w/sr-level 
mgmt  in  determining  prgm'g  and 
coding  needs.  Supervise  &  assign 
work  to  prgm'g  personnel.  Dir. 
systems  testing  &  netwk  trou¬ 
bleshooting  for  netwk  anomalies, 
suggesting  changes  &  directing 
modifications  to  adapt  programs 
to  new  reqs  &  increase  efficiency. 
Gather  &  format  documentation 
of  program  development  &  prep, 
reports  on  technological  systems 
to  update  sr  mgrs.  Analyze/convert 
financial  data  to  design  account¬ 
ing  systems.  Resp.  for  training 
subordinate  prgrm'g  personnel. 
Req.  Mast,  in  Comp.  Sci,  Comp. 
Eng'r.  or  Comp.  App.  or  foreign 
equivalent,  2  yrs  exp.  in  job  or  2 
yrs.  related  Analyst  exp.  Related 
exp.  must  include  C++,  Visual 
Basic,  MS  SQL  Server  for  data¬ 
base  &  portfolio  analysis.  $72K / 
yr.  40  hrs/5  day/wk.  Send  resumes 
to:  James  Wang,  Zais  Group 
LLC,  The  Galleria  Building  1 , 3rd 
FL,  2  Bridge  Ave.,  Red  Bank,  NJ 
07701-1106. 


Systems  Analyst.  Analyzes  user 
requirements,  problems  to  auto¬ 
mate  processing  or  to  improve 
existing  computer  systems. 
Bachelor  of  Science  in  Computer 
Science,  Engineering  or  math- 
related  and  2  years  of  AS/400 
hardware,  2  years  RPG/400 
language,  and  2  years  Lawson. 
$72000/year.  Apply  by  resume 
only  to  William  T. Wiley,  Sr.  Vice 
President,  Y.K.K.  (U.S.A),  Inc., 
1 306  Cobb  Industrial  Dr,  Marietta, 
Georgia  30066. 


♦ 


SR.  SYS.  ADMIN  for  24x7 
data  centers  &  clients  in  Metro 
NYC.  Rotating  shifts:  24x7 
on-call  as  sched.  Req.  BSCS  & 
3  yrs.  Sys  Adm  exp.  Visit 
www.verio.com/company/jobs/to 
apply  online.  No  calls.  Principals 
only. 


Jr.  Programmer:  Plan,  develop, 
implement  &  test.  Utilize  C, 
C++,  UNIX,  Visual  Basic,  JAVA, 
SAP,  MM/SD/ABAP,  Mainframe, 
Client/Server  apps.  Perform 
Database/Systems  admin,  and 
warehousing.  Req:  Bachelor's 
Degree  in  Comp.  Sci.,  Math, 
Eng.,  or  related.  Resume: 
Uniglobe  Technologies,  Inc. 
6500  McDonough  Road  St.  Cl  5, 
Norcross,  GA  30093. 


where  the  best  get  better 
1  800-7B2-2977 


Full-time  Senior  Analyst.  Re¬ 
sponsible  for  the  development  of 
customized  Business  Support 
Control  System  for  the  wireless 
telecommunication  industry,  work¬ 
ing  w/  BSCS.  Assist  clients  in 
evaluating  business  needs  & 
develop  testing  strategies,  plans 
&  enhancements  for  existing 
software  using  C,  Java,  PL\SQL, 
Unix,  Oracle  &  develop  Design 
Change  Request  (DCR)  &  write 
DCR  &  Functional  Specifications 
(FSPs).  Provide  management 
guidance  during  conversions  or 
application  upgrades,  resolve  data 
conversion  issues  and  oversee 
modules  setup  configuration 
&  data  migration.  Must  have 
Bachelor's  degree  in  Computer 
Science  or  related  field.  Foreign 
degree  equivalent  accepted. 
Must  have  2  yrs.  exp.  in  job 
offered  or  position  w /  same  duties. 
Send  resume  to  Tangela  Burks, 
SchlumbergerSema,  100  Milton 
Park,  30000  Mill  Creek  Ave., 
Suite  1 00,  Alpharetta,  G  A  30022. 


PAREXEL  International  currently 
has  positions  available  at  our 
900  Chelmsford  Street,  Lowell, 
MA  office: 

Senior  Manager  E-Services- 

Requires  Bachelor's  or  equiv  in 
CS,  Scientific  Engineering  field, 
or  related  plus  3  yrs  exp  in  clinical 
software  development,  including 
1  yr  in  statistical  analysis  and 
modeling  and  1  yr  with  expanded 
access  clinical  programs  (exp 
can  be  gained  concurrently). 
Must  also  have  knowledge  of  US 
and  European  drug  regulations. 

Programmer/Analyst:  Requires 
Bachelor's  or  equiv  in  CS,  Engi¬ 
neering,  Math,  or  related  field 
plus  2  yrs  exp  in  computer  field, 
at  least  1  year  of  which  using 
SQL  Server,  Oracle,  &  Lotus 
Notes. 

Oracle  Database  Administrator: 

Requires  Master's  or  equiv  in 
Systems  Engineering,  CS  or 
related  field  plus  5  yrs  exp  in 
database  programming  using 
Oracle  in  an  NT  environment  and 
associated  networking  hardware. 

Please  respond  to  hr@parexel. 
com  or  Attn  HR,  PAREXEL 
International  Corp.,  195  West 
Street,  Waltham,  MA  02154. 
EOE. 


Lead  Database  Analyst  wanted 
in  New  York  office  of  large  insur¬ 
ance  company  to  install,  tune, 
maintain  and  upgrade  Microsoft 
(MS)  SQL  Servers.  Upgrade  MS 
SQL  Servers  7.0  to  MS  SQL 
Servers  2000  on  Windows  Ad¬ 
vanced  Servers.  Analyze  existing 
EDI,  document  processes  in¬ 
volved  in  the  system  using 
HTML  and  support  EDI  wireless 
application.  Prepare  and  execute 
the  plan,  design  and  migration  of 
Access  97  databases  to  MS 
SQL  Server  7.0.  Involved  in  bidi¬ 
rectional  synchronization  with 
the  developing  SIEBEL  System 
and  the  existing  MS  SQL  Server 
environments.  Responsible  for 
assessing  the  parameters  for 
database  sizing,  capacity  plan¬ 
ning  and  the  design  and  man¬ 
agement  of  multiple  databases. 
Write  server  scripts  to  support 
the  JAVA  and  Visual  Basic  appli¬ 
cations  at  the  front  end,  create 
triggers,  stored  procedures  and 
views  for  the  entire  system,  and 
write  codes  to  support  the  auto¬ 
mated  backup,  loading  and 
unloading  of  data.  Advise  on 
best  practices  to  the  development 
team.  Replicate  the  production 
of  test  databases  and  set  up  test 
environments  for  various  MS 
SQL  Server  related  projects. 
Perform  analysis  of  database  to 
understand  end  users'  needs 
and  coordinate  projects  to  provide 
support  to  database  users  and 
report  weekly  on  the  progress  of 
projects  to  senior  management. 
Must  possess  a  Bachelor's 
degree  in  Computer  Engineering 
or  Computer  Science  and  at 
least  2  years  and  6  months  ex¬ 
perience  in  the  job  offered  or  2 
years  and  6  months  experience 
as  a  Programmer  Analyst  and/or 
Database  Administrator  utilizing 
MS  SQL  Servers,  Send  resume 
to:  Segolene  Prot,  AXA  Financial, 
1290  Avenue  of  the  Americas, 
New  York,  NY  10104.  EOE 
M/F/V/D. 


APPLICATION  DEVELOPER  to 
perform  design,  analysis,  devel¬ 
opment,  testing  and  implemen¬ 
tation  of  business  applications 
software  on  IBM  AS/400  and 
Windows  using  relational  data¬ 
base  DB2/400  and  Case  tools 
Cool  Plex  and  Cool  2E, 
RPG/400  and  CLV400  with  Java, 
Java  Beans  and  VC++.  Require: 
Bachelor  (or  equivalent)  in 
Computer  Science/Electronics 
Engineering  and  five  years 
experience  in  the  job  offered  or 
any  experience  providing  skills  in 
described  duties.  Competitive 
salary  and  benefits.  Apply  with 
resume  to:  Manager,  Application 
Development  Manufacturing, 
AFG  Industries,  Inc.,  1400 
Lincoln  Street,  Kingsport,  TN 
37660 


Applications  programmer:  Write 
computer  programs  and/or 
software  utilizing  knowledge  of 
plant  pathology  oriented  data 
processing  algorithms,  irrigation 
systems  control  and  agricultural 
data  acquisition/processing. 
Experience  in  low  level,  embedded 
system  development,  hardware 
emulators.  Must  be  fluent  in 
several  assembly  programming 
languages  for  the  Intel  8080, 
8085,  8048,  8051 ,  Motorola 
86000  series,  Microchip  16 
series,  Atmel  and  Texas  Instru¬ 
ments  microprocessors.  Experi¬ 
ence  in  hardware  design  devel¬ 
opment,  sensors,  actuators, 
radio  communications  and 
signal  analysis.  Fluent  with  Visual 
tools  series,  C,  C++  and  Java 
programming  languages  and 
good  understanding  of  computer 
operating  systems.  Ability  and 
solid  experience  developing 
device  drives  under  several 
operating  systems.  Full  scale, 
DCOM  client  server  based 
applications  including  user  inter¬ 
faces,  database  connectivity. 
Pipes  and  Sockets  networking 
under  Windows  NT  OS.  Experi¬ 
ence  with  communication  proto¬ 
cols  ISDN,  D4,  Dialogic,  serial 
protocols  and  strong  knowledge 
of  COM,  SQL  and  STL.  Strong 
ability  to  debug  preexisting 
software,  machine  code/assembly 
language  and  reverse  engineering 
skills  plus  unusual  development 
speed.  Fulltime  position  located 
in  Boca  Raton,  Florida.  Two 
years  experience  required. 
Qualified  applicants  send  resume 
only  to  Adcon  Telemetry,  Inc., 
1001  Yamato  Road,  Suite  305, 
Boca  Raton,  Florida  33431. 


CommVault  Systems,  Inc.  is 
need  of  the  following  computer 
professionals  for  its  Oceanport, 
NJ  location: 

Software  Developers-  Formulate, 
develop,&  design  computer  soft¬ 
ware  including  device  &  system 
drivers,  &  system  patches. 
Develop  &  direct  software 
system  testing  procedures, 
programming,  integration,  & 
documentation.  Reqd:Bach.  Deg 
in  Comp.  Science,  Eng'g  or 
related  field,  &  exp  w/  C, Solaris, 
&  shell  scripts. 

Systems  Analysts-  Analyze  user 
requirements,  procedures,  & 
problems  to  improve  existing 
systems.  Develop  new  systems 
to  improve  workflow.  Review 
system  capabilities  to  determine 
the  feasibility  of  proposed 
programs. 

Reqd: 

•  Bach.  Deg.  in  Comp.  Science. 
Eng'g  or  related  field  &  knowledge 
of  Windows  NT,  Windows  98  , 
and  Java. 

*  Master's  Deg.  in  Comp.  Science, 
Eng'g,  or  related  field  &  knowledge 
of  Solaris,  C++.  &  SQL. 

Resume  to: 

th  off  man  ©com  mvault.com 
EOE. 


Programmers  &  Software  En¬ 
gineers 

Design,  develop,  test  and  im- 
plemet  specialized  software 
apps  using  (a)  IIS5.0,  Clarify, 
XML,  VB,  ASP,  C,  C++,  CDO, 
MTS,  SQL  Server,  Oracle  & 
related  tools  in  Sun  Solaris/ 
NT/UNIX;  (b)  Citrix  ASP,  IIS, 
SQL  Server,  DB2,  Oracle/relat¬ 
ed  tools,  VB,  ASP.  Pro’C.  Web 
methods,  Citrix  XPS,  XML  in 
Sun  Solaris  NT/2000;  (c)  Clarify, 
Clarify  modules  &  tools-CB 
Exchange.  DDE,  UIE,  Clear 
Basic,  VB.  Unix  Shell  Scripts  in 
Oracle/related  tools,  SQL  Server, 
reporting  tools  in  Sun  Solaris/ 
NT/2000;  (d)  Web  Logic,  XML 
EJB,  JDBC,  Java,  Servlets,  Cold 
Fusion,  C,  C++,  Pro'C.  Oracle, 
Sybase  SQL  Server  and  related 
tools.  Utilities  in  RS  6000,  Solaris, 
NT/2000.  Consulting  positions 
requiring  extended  travel.  Pre¬ 
vailing  wage/benefits.  Send 
resume  to  Dale  Blake,  GPTS, 
3250  Peachtree  Industrial  Blvd., 
Suite  203,  Duluth,  GA  30096. 
EOE. 


INFORMATION 

TECHNOLOGY 

OPPORTUNITIES 

Putnam  Investments,  a  global 
money  management  firm,  handles 
investments  of  more  than  14 
million  shareholders  and  2,500 
institutional  clients.  At  Putnam, 
we  manage  over  $300  billion  in 
assets,  including  mutual  funds, 
retirement  plans  and  pension 
funds. 

We  offer  a  wide  range  of  infor¬ 
mation  technology  positions  in 
Massachusetts  at  our  offices  in 
Andover,  Franklin,  and  Boston. 
All  positions  require  at  least  a 
Bachelor’s  or  equivalent  degree, 
together  with  2  to  8+  years 
job-relevant  experience.  All 
candidates  must  evidence 
superior  credentials: 

•  Application  Programmers 
(NetDy-namics,  Java/J2EE,  C++ 
with  financial  applications 
programming  experience;  others) 

•  Data  Warehouse  (Strong 
Informatica  experience) 

•  Developers 

•  Business  Systems  Analysts 
(Asset  Management  industry 
experience) 

•  Application  Project  Managers 
(Investment  industry  experience) 

•  Unix  Systems  Administrators 

Generous  benefits  and  starting 
(base)  salaries  from  $65,000  - 
$115,000,  commensurate  with 
the  positions'  specific  responsi¬ 
bilities. 

Please  mail/fax/email  your 
resume,  indicating  Reference 
Code  "JMR-IMSP,"  to: 

Putnam  Investments,  Resume 
Processing  Center  (C-36-H),  7 
Shattuck  Road,  Andover,  MA 
01810;  Fax:  617/760-0613. 
Email:  Recruiterl  @ putnam.com 
(text  format  only). 

Putnam  Investments  is  an 
Affirmative  Action  /  Equal 
Opportunity  Employer. 


Senior  Technical  Analyst/ 
Computer  Consultant 

MSI  Inti,  seeks  Senior  Technical 
Analyst  for  design  and  develop¬ 
ment  of  software  in  the  banking/ 
financial  industry  on  various 
platforms  including  mainframe 
REXX  and  ISPF,  Visual  Basic 
and  Access  for  Windows  and 
PERL  on  Sun  Solaris.  Dealing 
room  experience  also  required 
for  support  and  maintenance  of 
existing  systems  including  RTW 
for  Windows,  ATW  for  Sun  Solaris 
and  Isofax  for  both  Windows  and 
Sun  Solaris.  Position  will  require 
maintaining  documentation 
using  Virtual  Media's  Hypertext 
Development  Kit.  BA  or  equiv.  in 
Comp  Sci.  or  related  field  plus 
ten  years  exp.  req.  Fax  resumes 
to  HR  Dept :  404  659  7139  and 
must  be  marked  for  attn.  of  Chris 
Wheeler  (MCD). 


SOFTWARE  ENGINEERS  (8 
positions)  require  Bachelor’s 
or  equivalent  in  Engineering/ 
Computer  Science/Mathematics/ 
Science  or  closely  related  field 
with  experience  providing  skills 
in  described  duties,  at  $70,000 
per  year;  Senior  Software  Engi¬ 
neers  (8  positions)  with  Master’s 
or  equivalent  and  experience,  at 
$75,000  per  year.  Provide  on-site 
consulting  in  design,  analysis 
and  development  of  software 
applications  for  legacy  systems 
in  IBM  mainframe  environment; 
development  and  administration 
in  Oracle,  DB2,  SQL  Server  and 
Sybase;  e-commerce  and  web 
applications  development  in 
Microsoft,  Java  and  related 
technologies;  network  manage¬ 
ment  systems  development  with 
Netscape  Server  and  related 
tools;  SAP  R/3  applications  on 
Windows  with  DOS  and  ABAP/4 
and  related  modules.  40%  travel 
to  client  sites  in  United  States. 
Mail  resumes  to:  Y  &  L  Consulting, 
Inc.,  7550  I  H  10  West,  Suite 
940,  San  Antonio,  TX  78229. 
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Riversand  Technologies,  Inc., 
specializes  in  providing 
customized  Product  Data 
Management,  enterprise,  product 
development,  E-commerce, 
B2B,  B2C,  and  E-integration 
solutions  and  services.  We  are 
looking  for  the  following  positions: 

Software  Engineers:  Research, 
design,  develop,  test,  and  imple¬ 
ment  B2B,  B2C,  and  Enterprise 
Application  Integration  (EAI) 
solutions  and  applications. 
Expertise  in  one  or  all  of  Java 
based  technologies  including, 
Tibco,  SeeBeyond,  Java  Servlets 
and  J2EE  based  applications  on 
multiple  operating  systems 
including  UNIX  and  NT. 
Proficiency  in  Microsoft  based 
technologies  including,  Microsoft. 
Net,  Microsoft  BizTalk  technology, 
VB  and  ASP.  Candidate  must  be 
able  to  use  functional  knowledge 
of  EAI  applications  and  data 
schema  techniques  to  design 
and  implement  technical  archi¬ 
tecture  for  e-integration  applica¬ 
tions  as  well  as  provide  post¬ 
implementation  support.  Need 
Masters's  degree  in  Engineering, 
Computer  Science,  or  related 
field.  Need  2+  years  of  experience. 

Systems  Analysts:  Analyze, 
design,  develop,  analyze,  and 
recommend  software  require¬ 
ments  for  e-commerce  applica¬ 
tions  including,  B2B,  B2C,  and 
Enterprise  Application  Integration 
using  Java  based  software  includ¬ 
ing  Servlets,  Tibco,  Javabeans, 
and  CORBA.  Create  software 
program  designs,  analyze  cus¬ 
tomer  requirements,  design,  and 
develop  Product  Data  Manage¬ 
ment  solutions  using  EAI  software. 
Commerce  Saver  2000  and 
Microsoft.NET  technologies. 
Requires  a  Bachelor's  in  Com¬ 
puter  Science  or  Engineering 
or  related  field  and  1  years  of 
experience. 

Send  Resume  to:  Anil  Kini, 
Riversand  Technologies,  Inc., 
51 1  Calloway  Drive,  Sugar  Land, 
Texas  77479  or  via  email  at: 
anil. kini  @  riversand.net 


Software  Engineer  sought  by 
software  consulting  company  in 
Englewood,  CO.  Engage  in  full 
life-cycle  software  development. 
Specifically,  design  and  develop 
client/server  and  web-based 
software  applications  which  in¬ 
corporate  ORACLE  relational 
database  management  systems 
and  run  on  UNIX  and  Windows 
NT  operating  systems,  and/or 
are  web-based.  Analyze  require¬ 
ments.  Create  designs  and  de¬ 
sign  documentation.  Code,  test, 
and  de-bug  the  software  appli¬ 
cations.  Use  Developer  2000, 
PIVSQL,  programming  languages 
C  and  C++,  and  ORACLE* 
Forms  and  ORACLE'Reports  in 
the  design  and  development 
process.  Requires  Bachelor's  or 
foreign  equivalent  in  Computer 
Science,  Engineering  or  related 
field  (including  Civil  Engineering); 
working  knowledge  of  ORACLE 
software  application  development, 
PL/SQL,  Developer  2000,  and 
UNIX.M-F;  8am-5pm;  $73.000/yr. 
Respond  by  resume  to  James 
Shimada,  Colorado  Department 
of  Labor  &  Employment, 
Employment  &  Training  Division, 
Tower  II,  #400,  1515  Arapahoe, 
Denver,  CO  80202  and  refer  to 
Job  Order  Number  CO  501 4601 . 


Software  Engineer:  Full  time. 
Competitive  salary  offered. 
Requires  bachelors  degree  in 
computer  science  or  electrical  or 
electronics  engineering  and  one 
year  experience.  Experience  to 
include:  use  of  PeopieSoft; 
design  of  web  sites  Must  have 
proof  of  legal  authority  to  work 
permanently  in  the  U  S.  No 
phone  calls.  Interested  appli¬ 
cants  should  send  resume  to: 
Masood  Ahmed,  The  Infologic 
Group.  Inc.,  504  W.Torrey  Pines, 
Vernon  Hills,  IL  60061. 


Amdocs,  a  leading  developer  of 
software  solutions  for  the 
telecommunications  industry  is 
seeking  team  players  with  strong 
technical  &  personal  skills  for  the 
following  positions  at  our 
Chesterfield,  MO  location.: 

"Programmer  Analysts-  to  plan, 
develop  test  &  analyze  telecom¬ 
munications  computer  pro¬ 
grams.  Must  have  four  years 
exp.  in  a  software  development 
occupation  and  exp.  with 
COBOL,  DB2  and  JCL. 

"Systems  Analysts-to  prepare 
workflow  charts  and  diagrams 
with  details  of  existing  &  proposed 
telecommunications  information 
systems.  Must  have  Bach.  Deg. 
in  computer  science,  math, 
engineering  or  a  quantitative 
discipline  with  a  minor  in  computer 
science  and  1  year  experience 
as  a  programmer  or  analyst. 
Must  have  exp.  with  SQL,  Oracle 
and  UNIX  and  exp.  with  telecom¬ 
munications  projects. 

Due  to  the  unpredictable  growth 
of  the  telecommunications 
industry,  candidates  for  all 
positions  must  be  willing  to 
temporarily  relocate  to  client 
sites  throughout  the  U.S.  Send 
resume  to: 

Amdocs,  Inc. 

1 390  Timberlake  Manor  Parkway 
Box  SL22 

Chesterfield.  MO  63017 

Fax:314-212-7076 

jobs@amdocs.com 


Terabeam  seeks  VP  of  Tech  Dev 
for  Seattle  Office.  DESC:  Supr, 
mng  &  prov  tech  dir  for  full  life 
cycle  dsgn,  dev  &  deploy  of  Ter¬ 
abeam  Optical  Wireless  Network 
(TOWN).  Dev  theoretical  dsgn 
initiatives  &  ID  tech  spec's  to 
meet  bus  req's.  Conduct  proto¬ 
typing  &  validation  to  ensure 
dsgn  meet  spec's  &  confirm  var 
network  infrastructures  &  free 
space  optics  interoperate  to 
complete  the  TOWN  solution. 
Perf  sys's  &  network  integration 
&  oversee  the  controlled  impl  of 
TOWN.  ID  new  prod's,  tech's 
and  services  to  facil  convergent 
broadband  wireless  comm's  & 
exec  bandwidth  rich  app's. 
REQS:  BSEE  +  5  yrs  of  exp 
dsgn,  dev  &  deployt  of  LAN  & 
WAN  util  network  &  internet  pro¬ 
tocols,  IP  tech's,  ATM,  Frame 
Relay,  Packet  over  SONET, 
TDM,  &  Type  2  circuits.  Conduct 
prototyping  &  validation  to  ensure 
interoperability  of  var  networking 
&  internet  tech's  &  infrastructures. 
Exp  may  be  gained  concurrently. 
Pis  send  resume  to  Job# 
102906-NW,  Terabeam,  12413 
Willows  Rd  NE,  Kirkland,  WA 
98034.  Job  #  required  for  con¬ 
sideration. 


SAP  Business  Information 
Warehouse  (BW)  company 
seeking  experienced  SAP  BW 
functional/technical  consultants 
familiar  with  generic  and  custom 
extractors,  data  modeling,  info 
sources  and  info  cubes.  Also 
seeking  SEM  and  Supply  Chain 
Management/APO  experience. 
Please  e-mail  resume  to  Busi¬ 
ness  Information  Solutions  at 
recruiting@bisamerica.com  or 
fax  to  (858)  458-5819. 


Please  send  your  resumes 
to  vpathi@socal.rr.com  or 
viraj@vxltech.com. 

Mulitple  positions.  Assist  in 
design,  development  &  imple¬ 
menting  programs.  Develop 
apps  for  clients  using  C.C++,  VB 
on  Windows.  SQL  Server  &  DB2 
Assist  in  development  of  OOD's. 
Requirement:  Computer  Engineer 
or  Engineering.  40  hr-week. 
Joh/lntv  Site:  Torrance,  CA.  Send 
resumes  to  VXL  Technologies 
Inc,  W  231st  Street.  Torrance, 
CA,  90501. 


NETWORK  SYSTEMS  ANALYST 

Under  close  supervision  of  Tech¬ 
nical  Leader  or  other  technical 
supervisory  personnel,  analyze 
and  refine  computer  system 
requirements,  research  and 
recommend  network  and  system 
hardware  and  software  to  meet 
customer  requirements,  assemble 
computer  systems  for  turnkey 
delivery,  and  participate  in  related 
sales  support,  implementation 
and  other  activities  utilizing  net- 
slamming,  computer  hardware 
architecture,  HTML.  TCP/IP  and 
IPX/SPX  protocols,  DOS  Batch 
and  RAID  Systems  for  work 
stations,  servers,  microcomputers 
and  notebooks.  Requires  B.S. 
or  equivalent  level  degree  in 
Computer  Science,  Computer 
Engineering,  or  a  closely  related 
field.  Qualified  applicants  must 
presently  be  eligible  for  perma¬ 
nent  employment  in  the  United 
States.  Successful  applicant 
must  be  able  to  perform  job 
duties  on  date  of  application. 
Position  is  with  Equus  Computer 
Systems  of  Missouri,  Inc.,  2000 
Westport  Center  Drive,  St.  Louis, 
Missouri.  Send  resumes  to: 
Charles  Chu,  General  Manager, 
Equus  Computer  Systems  of 
Missouri,  Inc.,  St.  Louis,  Missouri 
63146.  EOE 


JOB  OPPORTUNITY: 

Senior  Systems  Analyst 

Senior  Systems  Analyst. 
Pasadena,  CA.  Duties:  Using 
C++/STL,  design  &  implement 
key  components  of  a  distributed 
database  system.  This  includes 
developing  mathematical  models 
of  large  amount  data  distributed 
across  network,  &  its  associated 
libraries,  for  forecasting  purposes; 
a  proprietary  file  system  for  the 
database  system;  &  a  Java-based 
web  GUI.  Oversee  deployment 
of  system  on  Windows  NT  & 
Unix  platforms.  Reqs:  Master's 
or  foreign  equiv  in  Mathematics. 
Comp  Sci  or  a  closely  related 
field.  To  apply  send  resume  to: 
Phoebe  Wilson,  Acting  CFO, 
Knowledge  Decision  Sciences, 
Inc.,  21 1  W.  Franklin  St,  Monterey, 
CA  93940. 


VisionTek,  a  leading  manufacturer 
of  computer  peripheral  products 
located  in  Gurnee,  IL  has  excellent 
career  opportunities  for  qualified 
individuals  to  join  our  IS  team. 
SR.  PROGRAMMER  ANALYST; 
We  are  seeking  individuals  to 
design,  develop,  implement  and 
test  new  SAP  application;  Interface 
other  systems  with  SAP  reporting, 
conversion,  SAP  script  and  EDI. 
This  position  requires  solid 
communication  skills,  BS  or 
equivalent  in  Engineering.  Elec¬ 
tronics,  Math  or  related  and 
relevant  work  experience.  Part  of 
the  relevant  experience  must 
include  1  year  using  SAP  and 
ORACLE.  Mail  resume,  tran¬ 
scripts,  references  and  salary 
requirements  to  VisionTek,  Attn: 
HR-SPA.  1175  Lakeside  Dr., 
Gurnee,  IL  60031  -EOE.  M/F/D/V. 


SOFTWARE  ENGINEER  to 
provide  consultancy  in  design, 
analysis,  development  and 
maintenance  support  for 
Customer  Information  System 
for  utility  industry  on  IBM 
mainframe  legacy  systems  using 
CICS.  COBOL  II,  DB2,  VSAM, 
JCL  and  Easy-Trieve;  provide 
performance  review  of  on-line 
and  batch  application  code; 
analysis  and  performance  tuning 
of  SQL  used  in  data  processing 
programs.  Require:  M.S.  in 
Industrial/Mechanical  Engineer¬ 
ing/Computer  Science  and  three 
years  experience  in  the  job 
offered  or  any  experience 
providing  skills  in  described 
duties.  Salary:  $73,000  per  year, 
8  am  to  5  pm,  M-F.  Apply  with 
resume  to:  CEO,  FI ,  Inc.,  359  S. 
Franklin  Street,  Valparaiso,  IN 
46383-6423. 


Software  Engineer  sought  by 
information  technology  consulting 
company  in  Denver,  CO  to  work 
in  Denver  and  other  unanticipated 
job  sites  in  the  U.S.  Design,  de¬ 
velop,  and  test  web-based  com¬ 
puter  software  applications  that 
operate  on  UNIX  and  Windows 
operating  systems  and  which 
access  ORACLE  relational  data¬ 
base  management  systems. 
Use  JAVA,  CORBA,  C,  C++,  and 
HTML  in  the  design,  development, 
and  testing  processes.  Requires 
Master's  or  foreign  equivalent  in 
Computer  Science  or  related 
field,  including  Mechanical  Engi¬ 
neering;  1  yr  exp.  as  a  Software 
Engineer  performing  the  core 
duties  and  using  the  technologies 
described  above.  M-F;  8am-5pm; 
$66,100/yr.  Respond  by  resume 
to  James  Shimada,  Colorado 
Department  of  Labor  &  Employ¬ 
ment.  Employment  &  Training 
Division,  Tower  II,  #400,  1515 
Arapahoe,  Denver,  CO  80202  & 
refer  to  Job  Order  Number  CO 
5014444. 


System  Engineer 
Test,  install  and  maintain  computer 
operating  system  software;  mon¬ 
itor/install  data  communication 
lines;  design/maintain  the  NT 
infrastructure,  trouble-shoot 
networking  issues;  develop/ 
implement  computer  networking 
plan.  Master  degree  in  computer 
science  or  computer  information 
system  required.  Send  resume 
to  Mr.  Jonathan  Leong,  JLA 
Insurance  Agency,  7700  Edge- 
water  Drive,  Suite  265,  Oakland, 
CA  94621 


Software  Engineers  needed. 
Technology  Sourcing  Assoc,  has 
senior  &  mid-level  positions 
available  for  qualified  candidates 
possessing  MS/BS  or  equiv. 
and/or  relevant  work  exp.  Duties 
include:  design  &  develop 
software  applications;  modify, 
customize  &  enhance  software 
programs.  Work  with  3  of  the 
following:  SAP,  Siebel,  Oracle,  C, 
and  C++.  Mail  resume,  transcripts 
&  references  to:  Technology 
Sourcing  Associates.  Attn.  HR, 
22138  Saticoy  St.,  Canoga  Park, 
CA  91303. 


RESUMES  -  statistics  indicate 
that  as  many  as  1000  are 
submitted  for  every  Internet  job, 
over  100  for  each  local  ad.  Will 
your  resume  get  you  onto  the 
short  list?  We  specialize  in 
resumes  for  IT  professionals. 
Complete  resumes,  hard  and 
soft  copies  in  72  hours,  $89. 
MC/Visa/Amex  (714)  928-3168 
www.jovialdragon.com. 


Geographic  Information 
System  Programmer  Analyst 

(The  Woodlands,  TX):  Designs 
and  implements  applications  to 
process  Geographic  Information 
Systems  (“GIS")  data  generated 
by  laser  technology  using  AML 
and  C++  programming  skills  in 
Windows  NT  and  Unix.  Designs, 
develops,  and  implements  custom 
GIS  applications  in  forestry 
applying  knowledge  of  GIS  and 
forestry  ecology.  1  yr  related 
experience.  Contact:  Dan  Phillips 
of  Terra  Point  LLC  at  4800 
Research  Forest  Dr.,  The  Wood¬ 
lands,  TX  77381  (281)  364-4082 
(T);  (281)  363-7931  (F). 


SOFTWARE  ENGINEERS  (8 
positions):  require  Bachelor's  in 
Engineering/Computer  Science/ 
Mathematics/Science  or  closely 
related  field  with  experience 
providing  skills  in  described 
duties,  at  $60,000  per  year; 
Senior  Software  Engineers  (8 
positions)  with  Master's  and  two 
years  experience,  at  $65,000  per 
year.  Provide  on-site  consulting 
in  design,  analysis  and  develop¬ 
ment  of  operating  systems-level 
software  for  legacy  systems  in 
IBM  mainframe  environment; 
development  and  administration 
in  Oracle,  DB2,  SQL  Server 
and  Sybase;  e-commerce  and 
web  applications  development  in 
Microsoft,  Java  and  related  tech¬ 
nologies;  network  management 
systems  development  with 
Netscape  Server  and  related 
tools;  SAP  R/3  applications  on 
Windows  with  DOS  and  ABAP/4 
and  related  modules.  40%  travel 
to  client  sites  in  the  United 
States.  Mail  resume  to:  YASH 
Technologies,  Inc.,  Human 
Resources,  605  17th  Avenue, 
Suite  1,  East  Moline.  IL  61244. 


Full  time  Senior  Analyst  respon¬ 
sible  for  analyzing  and  accessing 
current  standards,  languages 
and  implementation  strategies 
for  streamlining  and  use  for 
clients.  Develop  test  case 
scenarios  and  build  scripts  as 
necessary  to  support  the  Software 
Quality  Test  environment.  Perform 
bench  marking  analysis  between 
different  language  approaches 
and  identify  client  system 
requirements.  Design  and 
develop  system  and  user 
workflow  models  and  system 
processing  modules.  Must  have 
a  bachelor’s  degree  in  CS  or  any 
engineering  discipline.  Must 
have  2  yrs  of  exp.  in  the  job 
offered.  Salary  $73,430/yr.  Send 
resume  to:  Hubert  Bares  Intec 
Telecom  Systems  2711  LBJ 
Freeway  Ste.  512,  Dallas,  TX 
75234. 
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Position  opening  for  IT  profes¬ 
sionals  with  industry  exp.  in  (var¬ 
ious  skills  combination  reqd.) 
MQ  Series;  XML,  STX  12,  EDI, 
MED  Editor,  PDK,  DTS,  OLAP, 
RPT,  VB  Script,  Dream  Weaver, 
GRC,  AWT,  Websphere,  JDBC, 
Visual  Interdev  FoxPro,  Solaris 
Unix,  SQL  Pre-Processor,  C, 
C++,  Oracle  Web  Application 
Server,  MTS,  Three-Tier,  Pro'C, 
OOP,  etc.  MS  or  BS  or  equiv  CS 
or  Elect/Mech/Power  Engg.  or 
Bus.  Admin,  or  rel  field.  Travel/ 
reloc.  reqd.  Resumes  only  to  HR, 
3i  People,  1780  Century  Circle, 
Ste.,  2,  Atlanta,  GA  30345. 


You  can 
find  a 
better 

JOB 

with  one 
hand  tied 
behind 
your  back. 


Just  point  your 
mouse  to  the 
world’s  best 
IT  careers  site. 

Brought  to 
you  by 

Computerworld, 
Info  World  and 
Network  World. 

Find  out  more. 

Call  your 
ITcareers  Sales 
Representative 
or  Janis  Crowley, 
1-800-762-2977 

Where  the  best 
get  better 


IT  CAREERS 


SPL-WorldGroup  is  an  interna¬ 
tional  builder  of  customer 
information  systems  for  utility 
companies.  We  are  currently 
looking  for  individuals  to  work  in 
our  development  centers  in  San 
Francisco,  California;  Morristown, 
New  Jersey;  Chicago,  Illinois  and 
other  various  unanticipated  sites 
throughout  the  United  States  as: 
Programmer  Analysts 
Database  Administrators 
Software  Engineers 
Project  Leaders 
Designers 
Architects 
SPL  WorkGroup,  Inc. 

75  Hawthorne  Plaza,  Suite  2000 
San  Francisco,  CA  94105 
Attn:  Jennifer  Bowman 
Fax:415-977-4551 
E-mail: 

iennifer  bowmanQsplwo.com 


Software  AG,  Inc.  is  recruiting  for 
all  types  of  Systems  Analysis 
Consultants,  Staff  Consultants, 
Project  Managers/Leaders, 
System/Software  Engineers, 
Quality  Assurance  and  R&D 
Specialists,  Programmer/Analysts 
and  other  computer  science 
professionals. 

We  have  offices  throughout  the 
U.S.  including:  Reston,  VA;  Atlanta; 
Chicago;  Dallas;  Sacramento, 
San  Ramon  and  Irvine,  CA;  and 
Denver. 

Resume  to:  Software  AG.  Inc., 
ATTN:  HR,  Computerworld  Ad, 
11190  Sunrise  Valley  Dr.,  Reston, 
VA  20191.  Fax:  703-391-8340. 
For  additional  information,  find  us 
under  Computer,  or  visit  our  Web 
site:  www.softwareagusa.com. 


PROGRAMMER/ANALYST 
LEAD  to  analyze,  design,  test, 
debug  and  implement  application 
software  for  credit  information 
management  system  using 
Object  Oriented  Technology, 
UML,  Rational  Rose,  C/C++, 
DB2,  Rogue  Wave.  SQLVEmbed- 
ded  SQL,  STL,  Scripting,  PVCS, 
UDB,  OOA/OOD,  DCOM,  ODBC, 
Oracle  and  Visio  under  Windows 
2000  and  UNIX  operating  sys¬ 
tems.  Require:  M.S.  degree  in 
Computer  Science/Engineering, 
or  a  closely  related  field;  Must 
have  a  demonstrated  ability  to 
perform  the  stated  duties  gained 
through  academic  coursework/ 
previous  work  experience.  Com¬ 
petitive  salary  offered.  Send 
resume  to:  Katherine  Crew,  VP, 
Human  Resources,  Equifax, 
Inc.,  1 525  Windward  Concourse, 
Alpharetta,  GA  30005  Attn:  Job 
BC. 


Programmer/Analyst  to  design, 
develop,  test,  implement,  maintain 
and  support  web  based  applica¬ 
tion,  decision  support  systems  in 
client/server  environment,  using 
Oracle8i,  DBA  Tools,  C,  C++, 
Developer  2000,  Java.  Express 
Server,  Oracle  Applications  on 
Solaris,  Windows  NT  and  AIX 
Platforms.  Require:  BS  Degree 
in  Computer  Science,  an  Engi¬ 
neering  discipline,  or  a  closely 
related  field  with  more  than  5 
years  of  progressively  responsible 
experience  in  the  Job  offered  or 
in  the  related  occupation  of  Soft¬ 
ware  Engineer.  Extensive  travel 
on  assignments  to  various  client 
sites  within  the  US  is  required. 
Competitive  salary  offered. 
Apply  by  resume  to :  Ravi  Kandi- 
malla,  President,  EVEREST 
COMPUTERS  INC.,  900  Old 
Roswell  Lakes  Parkway,  Suite 
300,  Roswell,  GA-30076:  Attn: 
JobJA 


Call  your 
ITcareers  Sales 
Representative 
or  Janis  Crowley. 

1-800-762-2977 


A  33-year  record  of  quality 
people  like  you. 

We  know  you're  in  demand.  So 
demand  the  best  environment 
for  your  growth:  IT  consulting 
with  an  international  leader. 
We're  everywhere  business  and 
industry  are,  with  offices  across 
the  country.  So  you've  always 
got  a  new  set  of  challenges, 
with  total  support.  We're  currently 
recruiting  the  following  profes¬ 
sionals:  Programmers,  Program¬ 
mer/Analysts,  Application  Devel¬ 
opment  Specialists,  Database 
Analysts,  Business  Analysts, 
Computer  Specialists,  Operations 
Specialists,  Network  Administra¬ 
tor/Specialists,  Software  Engineers 
and  Lead  Analyst/Programmers. 
Apply  online  at  www.ajilon.com. 

An  Equal  Opportunity  Employer 

Ajilon 

www.ajilon.com 


SOFTWARE  ENGINEER 

Software  engineer  to  design, 
develop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements 
to  determine  feasibility  of  design; 
direct  software  system  testing 
procedures  using  expertise  in 
Seibel  Tools,  Clarify  CRM,  Oracle 
and  PL/SQL.  design,  develop 
and  test  computer  programs  for 
business  applications;  analyze 
software  requirements  to  deter¬ 
mine  feasibility  of  design;  direct 
software  system  testing  proce¬ 
dures  using  expertise  in  Seibel 
Tools,  Clarify  CRM,  Oracle  and 
PL/SQL  Salary:  $66, 000/year. 
Working  Conditions:  8:00  A.M.  to 
5:00  P.M.,  40  hours/week,  involves 
extensive  travel  and  frequent 
relocation.  Apply:  Manager, 
Indiana  Job  Center,  350  North 
Fourth  Street,  Indiana,  PA  15701 
Job  No.  WEB228422. 


Multiple  positions  available  for 
computer  professionals  including 
Soft.  Eng’s,  P/A's,  Systems  Ana¬ 
lysts,  Network  Analysts,  Systems 
Admin's,  SW  Developers,  Web¬ 
site  Developers.  Locations  vary. 
Openings  now  w/leader  in  the 
field  including  TEKsystems, 
Onsite,  and  Allegis  Group.  Req’s 
travel  &  degree  (Bach,  MS,  or 
equiv.)  in  relevant  field.  Compet¬ 
itive  salary  &  benefits. 

Resume  to:  J.  Brigham,  Allegis 
Group,  HR;  6992  Columbia 
Gateway  Dr.,  Columbia,  MD 
21046.  ID  Job  No.  04-01-2002. 


General  Electric  Company, 
located  in  W.  Burlington,  IA, 
seeking:  Customer  Application 
Engineers,  to  interpret  customer 
specifications  &  engineering 
drawings  for  Medium  Voltage 
Switchgear  up  to  15000  Volts. 
Prepare  detailed  engineering 
designs  &  drawings.  MS/equiv.  in 
Electrical  Engg  &  1  yr.  exp.,  or 
BS/Equiv.  in  Electrical  Engg  &  5 
yrs.  exp.  Mail  resume,  references 
&  salary  requirements  to  GE, 
51 0  E.  Agency  Rd. ,  W.  Burlington, 
IA  52655.  No  Walk-Ins. 


PEOPLE  WITH  THE  FOLLOW¬ 
ING  SKILLS  NEEDED  FOR 
ASSIGNMENTS  THROUGH¬ 
OUT  THE  USA.  ORACLE, 
SYBASE,  POWERBUILDER, 
AS400,  PROGRESS,  UNIX 
SYSADMIN,  NATURAL,  SOU 
SERVER,  JAVA,  INGRES, 
SAS,  VB,  HTML.  PLEASE 
MAIL  RESUME  TO  DIR. 
RECRUITING,  Skillsoft  Inc., 
20283  State  Road  7,  Suite  300, 
Boca  Raton,  FL  33498,  U.S.A. 
www.skillsoftusa.com 


SOFTWARE  ENGINEER 

Software  engineer  to  design, 
develop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements 
to  determine  feasibility  of  design; 
direct  software  system  testing 
procedures  using  expertise  in 
Developer  6i,  Oracle  9iAS,  Java 
and  Designer  6i.  Requirements: 
Bachelor's  Degree  or  equivalent 
in  Computer  Science  or  related 
field  and  two  years  experience 
as  a  software  engineer  or  com¬ 
puter  programmer,  knowledge 
of  Developer  6i.  Oracle  9iAS, 
Java  and  Designer  6i.  Salary: 
$77, 000/year.  Working  Conditions: 
8:00  A.M.  to  5:00  P.M.,  40  hours/ 
week,  involves  extensive  travel 
and  frequent  relocation.  Apply: 
Fayette  County  Team  PA  Career 
Link,  JS  Supervisor,  Iowa  Street. 
Uniontown,  PA  15401-3513,  Job 
No.  WEB228419. 


Software  Engineer.  Duties:  Ana¬ 
lyze,  design,  develop  &  implement 
internet/intranet-based  appls. 
using  ASP/VB  (active  Server 
Pages/Visual  Basic)  &  Script/ 
SQL  server.  Design  &  develop  in¬ 
ternet/intranet  server  appls.  using 
Java  &  object-oriented  analysis. 
Perform  integration  of  legacy 
database  appls.  for  the  Web. 
Customize  software  for  client 
use  in  a  web-based  environ,  using 
VB,  ASP,  XML  and  SQL  Server. 
Resp.  for  full  life-cycle  develop, 
of  business  appls.  Requires: 
M.S.  in  Comp.  Sci.,  Eng.  or  related 
field  &  3  yrs.  exp.  in  the  job 
offered  or  3  yrs.  exp.  as  a  Con¬ 
sultant,  Developer  or  Systems 
Analyst.  Will  accept  B.S.  &  5  yrs. 
of  prog.  exp.  in  the  comp.  ind.  in 
lieu  of  M.S.  &  3  yrs.  exp.  Concur¬ 
rent  exp.  must  ind.:  3  yrs.  exp. 
designing  &  developing  internet 
&  intranet  applies,  using  Java 
&  ASP  &  3  yrs.  exp.  performing 
integration  of  database  appls.  40 
hrs./wk.;  8:00  a.m.  to  5:00  p.m. 
Send  resume  (no  calls)  to:  Paula 
Mealy,  CTG,  Inc.,  401  E.  Pratt 
St.,  Suite  2522,  Baltimore,  MD 
21202-3002. 


STAFF  SCIENTIST  (Atlanta,  GA) 
to  research,  design  and  develop 
advanced  statistical,  numerical 
and  optimization  algorithms,  in¬ 
cluding  time-series  analysis/ 
forecasting,  single  or  multi-ech¬ 
elon  replenishment,  large-scale 
simulations,  allocation  algorithms, 
mixed  integer  programming 
models,  distance-vector  cluster¬ 
ing,  neural  networks,  genetic 
algorithms,  pattern  detection, 
and  data  characterization;  Design, 
implement  and  analyze  large- 
scale  application  software  systems 
in  a  client  server  environment; 
Lead  a  team  and  establish  work 
plan  under  limited  supervision. 
Require:  M.S.  degree  in  Applied 
Mathematics,  Computer  Science/ 
Engineering,  or  a  closely  related 
field.  Must  have  a  demonstrated 
ability  to  perform  stated  duties 
gained  through  previous  work 
experience/academic  coursework 
and  projects.  Competitive  salary 
offered.  Apply  on-line  at  www. 
retek.com/aDolv.  Be  sure  to 
include  “CompWorld"  as  the 
source  code. 


Sr.  Software  Engineer.  Duties: 
Design  &  develop  large  scale, 
complex  business-to-business 
(B2B)  commerce  appls.  using 
Java,  Visual  Age  for  Java, 
C/C++,  Web  Sphere  &  Oracle  in 
a  Client  Server  environ.  Resp.  for 
writing  of  custom  programs  using 
Java.  C/C++  &  Oracle  to  enhance 
user  appeal  &  web  site's  overall 
functionality.  Create  front-end 
user  interfaces  to  new  or  existing 
databases  using  HTML,  SQL, 
Visual  Age  Java,  EAI,  Weblogic, 
Corba  &  Vitria.  Requires:  B.S.  (or 
foreign  equiv.)  in  Comp.  Sci., 
Eng.  or  related  field  &  2  yrs.  exp. 
in  the  job  offered,  or  2  yrs.  exp. 
as  a  Consultant.  Concurrent  exp. 
must  incl.  2  yrs.  exp.  designing  & 
developing  commerce  appls.  &  2 
yrs.  exp.  using  Java.  40  hrs./wk.; 
8:00  a.m.  to  5:00  p.m.  Send 
resume  (no  calls)  to:  Tim  Weis, 
CTG,  Inc.,  55  Public Sq„  4th  FI., 
Cleveland.  OH  44113. 


COMPUTER/IT 

Programmer/Analyst.  Rancho 
Cordova.  CA:  Multiple  openings. 
Responsible  for  enhancing  and / 
or  maintaining  a  loan  tracking 
system  written  in  Natural  with 
ADABAS  as  the  database.  Plan, 
develop,  test  and  document 
computer  programs,  applying 
knowledge  of  programming  tech¬ 
niques  and  computer  systems. 
Duties  include  evaluating  user 
request  for  new  or  modified 
program,  such  as  for  financial  or 
human  resource  management  to 
determine  feasibility,  cost  and 
time  required,  compatibility  with 
current  system  and  computer 
capabilities,  and  formulating 
plans  outlining  steps  required  to 
develop  program,  using  structured 
analysis  and  design.  Requires: 
B.S.  or  foreign  equivalent  in 
Computer  Science  or  related 
field.  EOE.  40hrs/wk.  Send  resume 
(no  calls)  to  Mr.  Jeff  DeGroot, 
Senior  Technical  Recruiter, 
EdFund  3300  Zinfandel  Drive, 
Rancho  Cordova,  California 
95670. 


Senior  Systems  Analyst,  Business 
Intelligence  Area.  Responsible 
for  project  management  in  multi¬ 
platform  environment.  Will  work 
w /  sr.  management  of  the  busi¬ 
ness  unit  to  help  define  analytical 
business  requirements;  define 
system  design  &  hardware 
requirements;  develop  schedules, 
resources,  &  cost  projections; 
provide  oral  &  written  project  up¬ 
dates;  and  participate  freely  in 
the  development,  testing  & 
implementation  of  the  defined 
application.  Must  have  COBOL 
programming  skills  in  the  IBM 
OS-390  environment  &  detailed 
knowledge  of  database  design 
employing  both  RDBMS  &  OLAP 
Structures.  Must  have  a  M.S.  in 
Computer  Science  (a  B.S.  in 
Computer  Science  &  5  years  of 
progressive  experience  will  be 
accepted).  Send  Resume  to  HR, 
Russell  Corporation,  attn:  Sr. 
Systems  Analyst  Position,  3330 
Cumberland  Blvd.,  Suite  800, 
Atlanta,  GA  30339. 


Software  Engineer  -  Pittsburgh, 
PA  to  perform  software  engineering 
jobs  under  general  technical 
supervision.  Assist  in  or  respon¬ 
sible  for  developing  software 
engineering  standards  to  be 
followed  by  other  engineers. 
Follow  general  specifications 
provided  by  manager.  Design 
and  develop  commercial  client/ 
server  applications  using  Oracle, 
CRM,  ClearBasic,  WindowsNT 
and  Mainframe.  Participate  in 
system  and  database  design 
meetings.  40  hrs  /wk.  M-F.  9:00 
am  -  5:00  pm.  $70,000/yr. 
Require  B.S.  or  equiv.  degree  in 
Computer  Science,  Engineering, 
Math  or  Equiv.  and  5  years  exp. 
in  the  job  offered  or  5  years  exp. 
as  a  Programmer/Analyst  or 
equiv.  Experience  must  include 
design  and  development  of 
applications  using  Oracle,  CRM, 
Clear  Basic,  WindowsNT  and 
Main  Frame.  Relocation  Possible. 
Submit  resume  to  the  Director, 
Pittsburgh/Alleghany  Co.  Career- 
Link,  Attn:  JS  Supervisor,  425 
Sixth  Avenue,  Suite  2200.  Pitts¬ 
burgh,  PA  15219.  Job  Order 
Number:  WEB  231463. 


Computer  Professional  (Multiple 
Openings)  W/exp  in  one  or  more 
of  the  following: 

C/C++,  JAVA,  Power  Builder, 
Visual  Basic,  Oracle,  Developer 
2000,  Sybase,  Windows,  Unix 
Admin,  People  Soft,  SOI  Server. 
SAP,  Oracle  Financials,  Cobol, 
Db2,  Cics,  MVS,  JCL,  AS/400 
Lucrative  compensation.  Please 
E-mail  your  Resumes  to  the 
following  address:  RESUMES® 
COMDATAUS.COM 

Attn.  HR  Department 
Comdata  Consulting,  Inc. 

961  Busse  Road 

Elk  Grove  Village,  IL  60007 

VISIT 

WWW.COMDATAUS.COM 
For  More  Details 


CONNETICUT 

Sr.  Bus  Anal. 

Sr.  Program  Anal. 

DELAWARE 

Comp.  Scientist 
Supp  Anal. 

CS.  Program/ Anal 
Network  Eng. 

Oracle  DBA 
SMTS  Program/Anal. 

MASSACHUSETTS 

Comp.  Scientist 
Sr.  App.  Developer 
Sr.  Consult. 

Sr.  Oracle  PL/SQL  Dev 

NEW  JERSEY 

Comp.  Scientist 
Sr.  Consultant 

NEWYORK 

Comp.  Scientist 

OREGON 

Sr.  ERP  Prod.  Specialist 

TEXAS 

App.  Consult.,  GraphTalk 
App.  Developer 
Bus.  Development 
IS  Specialist 
Lead  Systems  Eng 
Tech.  Specialist 
Sr.  Comp.  Scientist 

VIRGINIA 

Computer  Scientist 
DB  Admin 

WASHINGTON 

ERP  Prod.  Specialist 
Sr.  Consult. 

Tech.  Designer 

Some  positions  may  require  a 
BS/MS  degree,  relevant  experience, 
or  a  combination  of  experience  and 
college  level  education  may  be 
accepted  for  some  positions.  The 
flexibility  to  travel  and  be  on-call  may 
be  necessary.  All  positions  involve 
public  speaking  and  presentations  to 
clients  and  prospective  clients. 
Salary  is  DOE.  Proof  of  legal 
authorization  to  work  in  the  U.S.  is 
required. 

We  offer  excellent  compensation 
and  a  comprehensive  benefits 
package.  Please  forward  your 
resume  to:  Email:  cschr@csc.com 
referencing  KH-CW-202  in  the 
subject  line.  Mail:  Attn:  Kim  Hale, 
2100  E.  Grand  Ave.,  El  Segundo, 
CA  90245.  Please  indicate  the 
specific  title  and  location  of  job  for 
which  you  are  applying  on  your 
application  letter.  EOE.  M/F/D/V 

HTTP  //CAREERS  CSC  COM 


Programmer  Analyst  Work 
Sched  8:00AM-5:00PM  40  hrs/ 
wk.  $64,378.08  P/A.  Evaluate, 
analyze,  develop  &  support 
Customs  Systems  &  Engineering 
Bills  of  Material  systems  for 
corporate  facilities  (vehicle 
assembly  plants  &  component 
manufacturing  plants)  in  North 
America  (U.S.,  Canada  &  Mexico). 
Evaluate  &  define  software  testing 
methods,  redesign  infrastructure 
&  process,  &  analyze,  design, 
implement  &  support  systems 
using  TSO  &  DB2  mainframe- 
based  systems.  &  client  server 
systems  with  Novel,  Unix, 
PowerBuilder,  Sybase,  CT- 
Libraries.  UDB  (Universal  Data¬ 
base)  &  C/C++  using  object 
oriented  methodologies  &  Java 
technologies.  Design/install 
Indirect  Productive  Material  & 
Corporate  Custom  Systems 
(client  server  systems)  using 
Java  via  intranet.  Interface  with 
end-users  to  develop  system 
requirements  &  provide  in-depth 
applications  support.  Bachelor 
(or  Equivalent).  Any  Computer 
Science  or  Engineering  field. 
Two  yrs.  exp.  in  Job  or  Related 
Occupation  of  Programmer 
Analyst.  Two  years  of  Related 
Occupation  experience  must 
include  analysis,  design,  imple¬ 
mentation  &  support  mainframe 
systems  applications  running 
TSO  &  DB2,  &  client  server 
applications  networks  running 
Novell  &  Unix  using  object 
oriented  methodologies  &  Java 
technologies,  which  may  be 
concurrent  with  Related  Occu¬ 
pation  experience.  Employer 
Paid  Ad.  Send  resume  to 
MDCD/ESA.  P.O.  Box  11170, 
Detroit.  Ml  48202.  Ref.  No. 
201813. 
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Copyrights 

“The  result  of  it  would  be  to 
essentially  emasculate  the  PC 
as  a  useful  device.” 

For  corporate  end  users,  this 
legislation  would  do  more  than 
that.  For  instance,  the  bill  would 
make  it  illegal  to  import  affect¬ 
ed  hardware  or  software  that 
lacks  the  anticopying  standard. 
For  example,  a  New  York-based 
Firm  that  moved  servers  and 
PCs  into  the  U.S.  that  it  bought 
for  and  used  in  a  Canadian 
branch  office  could  be  violating 
this  law,  said  legal  experts. 

Using  software  downloaded 
from  foreign  servers  could  also 
be  a  problem  if  it  didn’t  con¬ 
form  to  the  standard. 

Performance  could  suffer. 
Whenever  you  tried  to  copy 
files,  the  system  would  check 
to  see  if  you  were  allowed  to 
do  so,  said  Troy  Baer,  a  systems 
engineer  at  the  Ohio  Super¬ 


computer  Center  in  Columbus. 
“It’s  one  more  thing  you  have 
to  do  every  time  you  manipu¬ 
late  a  file,”  he  said.  “It’s  one 
more  thing  to  break.” 

Carey  Sherman,  general 
counsel  for  the  Washington- 
based  Recording  Industry  As¬ 
sociation  of  America  (RIAA), 
said  the  legislation’s  objective 
is  to  stop  unlimited  distribu¬ 
tion  of  copyrighted  material 
over  the  Web.  RIAA  estimates 
that  worldwide  piracy  cost  the 
U.S.  entertainment  software 


NEWS 


industry  over  $3  billion  in  2001. 

Sherman  said  the  industry 
wouldn’t  be  able  to  police 
open-source  software  or  plug 
every  technology  hole.  But,  he 
said,  the  goal  of  the  legislation 
“is  to  limit  the  extent  of  the 
damage”  in  the  mass  market. 

The  bill  is  seen  primarily  as 
a  vehicle  for  voluntary  stan¬ 
dards.  But  based  on  initial  re¬ 
actions,  it  seems  difficult  to 
imagine  how  that  will  be 
achieved.  Both  sides  on  the  is¬ 
sue  have  financial  reasons  to 


stake  out  strong  positions. 
Recorded  music  sales  were  re¬ 
portedly  down  10%  last  year,  in 
part  because  of  pirating.  But 
anticopying  technology  on 
PCs,  handheld  devices  and 
other  technologies  could  hurt 
those  markets. 

“It  would  probably  crash  the 
[PC]  consumer  market,  given 
that  being  able  to  [copy]  songs 
is  one  of  the  reasons  that  peo¬ 
ple  are  buying  new  machines,” 
said  Rob  Enderle,  an  analyst  at 
Giga  Information  Group  Inc.  in 
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Santa  Clara,  Calif. 

Other  business  models  are 
possible,  including  offering 
content  that’s  available  to  con¬ 
sumers  who  use  copyright- 
protected  machines,  said  Scott 
Draughon,  a  technology  and 
intellectual  property  attorney 
in  Jacksonville,  Fla.  He  said  the 
content  industry  “has  to  take 
responsibility  for  policing  its 
own  its  own  rights  and  cannot 
rely  on  another  industry  to 
step  in  and  do  it  for  them  with¬ 
out  paying  these  people.”  ► 


Open-Source 
Experts  Wary 
Of  Legislation 

The  open-source  community  is 
viewing  the  newly  introduced  copy¬ 
right  protection  bill  being  consid¬ 
ered  in  the  Senate  with  suspicion. 

“It  essentially,  if  applied  as  pro¬ 
posed,  would  look  at  a  computer, 


whether  in  the  home  or  in  a  business,  as 
basically  an  entertainment  box”  for  han¬ 
dling  digital  content,  said  Mark  Webbink, 
a  senior  vice  president  and  general 
counsel  at  Raleigh,  N.C.-based  Linux 
vendor  Red  Hat  Inc.  “But  that’s  not  true.” 

Webbink,  while  sympathetic  to  the 
entertainment  industry,  said  content 
providers  should  invest  in  technologies 
to  distribute  and  sell  digital  content  in  a 
controlled,  legal  manner  and  not  depend 
on  the  IT  industry  to  solve  the  problem. 

The  legislation  would  make  it  illegal 


for  open-source  developers  to  use 
reverse-engineering  techniques  to  de¬ 
velop  interfaces  to  other  applications, 
Webbink  said. 

John  Terpstra,  a  spokesman  for 
Caldera  International  Inc.  in  Orem, 
Utah,  said  the  bill  introduced  by  Sen. 
Ernest  Hollings  (D-S.C.)  is  too  vague. 

“I  am  concerned  that  the  legislation 
that  might  come  out  of  this  bill  would 
end  up  being  the  edge  of  a  wedge  that 
would  make  open-source  software 
illegal,”  Terpstra  said.  “The  purpose  is 


to  protect  copyrights,  to  protect  a 
revenue  stream,  to  protect  one 
group  of  the  public  over  another." 

Tim  Witham,  lab  director  of  the 
Open  Source  Development  Lab  in 
Beaverton,  Ore.,  said  the  bill  would 
stifle  advancements  in  technologies. 

"For  an  industry  that  needs  en¬ 
hancements  in  the  computer  indus¬ 
try  for  animation,  it  seems  they  are 
cutting  off  their  noses  to  spite  their 
face,”  Witham  said. 

-  Todd  R.  Weiss 


Continued  from  page  1 

blunderers 

Network  with  real-time  access 
to  certain  financial  data. 

Banks  and  holding  compa¬ 
nies  had  been  required  to  sub¬ 
mit  suspicious  activity  reports 
and  currency  transaction  re¬ 
ports  for  suspect  cash  transac¬ 
tions  over  $10,000.  The  new 
regulations  require  more  so¬ 
phisticated  database  surveil¬ 
lance  tools  and  will  most  likely 
require  an  IP/ VPN  connection 
to  FinCEN. 

“SARs  and  CTRs  are  filed 
now  both  electronically,  and 
they’re  mailed  to  an  IRS  com¬ 
puting  center  in  Detroit  today. 
That’s  not  going  to  cut  it  for 
what  [the  government  is]  look¬ 
ing  to  do,”  said  Terence  Don¬ 
nelly,  vice  president  of  busi¬ 
ness  development  at  Sawis 
Communications  Corp.  in 
Herndon,  Va.,  a  network  service 
provider  to  some  5,000  banks. 

Currently,  there  is  much  de¬ 


bate  in  the  industry  as  to  how 
much  impact  the  new  regula¬ 
tions  will  have.  Many  firms  are 
turning  to  software  that  can 
not  only  scan  databases  for 
customers  who  may  be  on  law 
enforcement  suspect  lists  but 
also  create  individual  profiles 
of  customers  and  monitor  the 
data  for  any  unusual  or  suspi¬ 
cious  activity. 

Breffni  McGuire,  an  analyst 
in  the  global  payments  practice 
at  TowerGroup  in  Needham, 
Mass.,  said  the  new  regulations 
will  have  a  “major  impact”  on 
how  banks  identify  who  their 
customers  are  and  what  kind  of 
business  they’re  involved  in. 

“No  bank  wants  to  be  known 
as  bin  Laden’s  bank.  So  reputa¬ 
tion  and  risk  issues  are  really 
important  in  the  aftermath  of 
Sept.  11,”  McGuire  said.  “The 
fines  under  the  act  have  also 
increased  —  in  some  instances 
as  high  as  $1  million.” 

New  York-based  electronic 
communications  network  Archi¬ 
pelago  LLC  went  live  last 


month  with  an  artificial  intelli¬ 
gence  anti-money-laundering 
software  that  will  monitor  all 
trading  activity  at  the  exchange. 

The  software,  from  London- 
based  Searchspace  Ltd.,  is  ca¬ 
pable  of  interpreting  millions 
of  trade-related  transactions 
each  day,  automatically  learn¬ 


ing  and  recognizing  patterns  of 
trading  activity,  and  alerting 
compliance  officers  to  patterns 
analogous  with  insider  deal¬ 
ing,  front-running  and  market 
manipulation. 

Zurich-based  bank  UBS  AG 
also  announced  last  week  that 
it’s  planning  to  embark  upon  a 


multimillion-dollar  effort  to  in¬ 
stall  software  to  monitor  its 
banking  transactions  in  about 
40  countries  to  fight  money 
laundering. 

UBS  spokesman  Christoph 
Meier  said  the  software  from 
Searchspace  that  the  bank  is 
using  also  bolsters  anti-mon¬ 
ey-laundering  efforts  the  bank 
already  had  in  place  that  allow 
it  to  search  customer  databas¬ 
es  for  suspicious  activity. 

“UBS  had  this  procedure  to 
look  at  client  transactions  for  a 
long  time  to  comply  with  anti¬ 
money-laundering  legislation 
in  Switzerland,  which  is  tough,” 
he  said.  “Then,  after  Sept.  11, 
new  dimensions  were  added.” 

Meier  said  the  compelling 
part  about  UBS’s  new  software 
is  that  it  has  artificial  intelli¬ 
gence,  “and  it’s  helping  us  look 
for  behavior  patterns  that  are 
different  from  a  client’s  usual 
behavior.  We  can  immediately 
discover  if  there  is  a  deviation 
from  a  normal  behavior  pat¬ 
tern,”  he  said.  > 


Rinse  Cycle 


What  the  International  Money  Laundering  Abatement  and 
Anti-Terrorist  Financing  Act  changes: 

■  The  regulations  seek  to  establish  a  link  between  federal  law 
enforcement  and  financial  institutions  for  the  sharing  of  cus¬ 
tomer  information  concerning  accounts  and  transactions 
that  may  involve  terrorist  activity  or  money  laundering 

■  Requests  for  information  include  money-transfer  business¬ 
es,  credit  unions,  securities  broker  dealers,  issuers  of  trav¬ 
elers  checks  and  some  credit  card  system  operators  not 
covered  as  money-service  businesses. 

■  The  wide  availability  of  anti-money-laundering  products  and 
technology  makes  them  required  components  of  any  effec¬ 
tive  anti-money-laundering  compliance  program 

■  Enhanced  scrutiny  of  correspondent  banking,  private 
banking  and  concentration  accounts  extends  the  need  for 
expanded  or  enterprisewide  anti-money-laundering  systems 
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Missing  the  Boat 

IT  CAN’T  BE  DONE.  That’s  the  important  thing  to  understand 
about  the  U.S.  Navy’s  goal  of  getting  all  its  new  systems  to 
work  with  its  existing  IT.  Last  week,  Rear  Adm.  Kenneth 
Slaght,  who  runs  the  Navy’s  space  and  naval  warfare  systems 
command,  told  a  crowd  in  Washington  that  IT  vendors  will 
have  to  give  up  their  rip-and-replace  approach  and  figure  out  how 
to  make  products  work  with  the  Navy’s  30,000-odd  legacy  systems. 
But  it  won’t  happen  —  no  matter  how  many  admirals  order  it. 
There’s  no  way  to  make  it  happen.  It’s  simply  impossible. 

But  the  Navy  has  to  try  anyway. 


The  reasons  for  that  aren’t  hard  to  under¬ 
stand.  Some  of  it  comes  down  to  budgetary  pol¬ 
itics:  Old  systems  may  be  clunky  and  expensive 
to  maintain,  but  they’re  paid  for.  Replacing 
them  with  shiny  new  gear  is  hard  to  cost-justify 
to  taxpayers,  even  if  the  new  equipment  is 
faster,  cheaper,  more  standardized,  more  reli¬ 
able  and  easier  to  network. 

And  some  of  it  comes  down  to  office  politics: 
Managers  resist  giving  up  their  systems,  espe¬ 
cially  systems  they  sponsored  when  they  were 
first  installed. 

But  there’s  another  factor:  Those  legacy  sys¬ 
tems  work.  They  don’t  need  fixing  because 
they’re  not  broken  —  but  the  surest  way  to 
break  them  is  to  port  them,  re-engineer  them  or 
replace  them  with  something  new.  Projects  like 
that  are  quagmires  that  invariably  suck  down 
budgets,  schedules  and  the  morale  of  IT  people 
trying  to  get  the  new  versions  to  work. 

So  it’s  not  naive  to  want  to  keep  those  legacy 
systems  going.  It’s  not  foolish  or  self-indulgent. 

It’s  just  impossible. 

Sure,  we  all  know  what  kind  of  architecture  to 
use:  You  create  a  wrapper  of  new  code  around 
each  old  stand-alone  system.  That  wrapper  lets 
the  old  system  talk  to  the  network. 

To  the  old  system,  the  wrapper  ap¬ 
pears  to  be  a  user  or  operator  or 
administrator:  to  users  on  the  net¬ 
work,  the  wrapper  is  a  standardized 
interface  to  the  old  system. 

It  sounds  great.  Sometimes,  you 
can  even  make  it  work. 

But  after  20  years  of  plastering 
those  wrappers  around  legacy  sys¬ 
tems,  we’ve  learned  a  few  ugly 
truths  about  them.  One  is  that 
wrappers  are  slow  —  you  usually 
end  up  having  to  buy  a  very  fast 
new  machine  to  serve  as  a  gateway 


to  a  very  slow  legacy  system. 

Another  is  that  wrappers  don’t  really  give  you 
everything  the  old  system  did.  The  wrapper- 
builders  can  never  figure  out  how  to  access  all 
the  system’s  features.  Users  end  up  with  a  lame, 
thoroughly  unsatisfactory  version  of  what  they 
had  before. 

That’s  why  most  of  the  systems  we  wrapped 
during  the  client/server  and  Internet  eras  ended 
up  being  replaced  anyway.  Wrappers  seemed 
like  a  good  idea  at  the  time,  but  they  turned  out 
to  be  more  trouble  than  they  were  worth. 

But  there’s  another  problem  with  wrappers  — 
one  that’s  a  lot  more  critical  in  a  military  con¬ 
text.  Wrappers  are  fragile.  They  break  down. 
They  do  funny  things  and  produce  screwy  re¬ 
sults  —  and  there’s  no  way  to  predict  when 
those  intermittent  problems  will  show  up. 

That’s  annoying  and  exasperating  in  a  busi¬ 
ness  system,  where  the  worst  that’s  likely  to 
happen  is  that  a  fragile  wrapped  system  costs 
the  business  a  sale. 

But  in  a  military  system,  brittle,  breakdown- 
prone  wrappers  aren’t  just  annoying  or  exasper¬ 
ating.  They  could  cost  lives  and  battles.  That’s 
an  unacceptable  risk. 

And  nobody  knows  how  to  avoid 
those  problems  and  that  risk  —  at 
least,  not  without  junking  the  old 
systems  and  replacing  them  proper¬ 
ly.  Which  is  exactly  what  the  Navy 
says  it  wants  to  avoid. 

It’s  a  laudable  goal.  And  if  it  can 
help  steer  vendors  away  from 
grandiose  dreams  of  getting  rich  by 
replacing  the  Navy’s  systems  whole¬ 
sale,  maybe  it’s  a  good  public  posi¬ 
tion  to  take. 

Just  so  long  as  somebody  in 
charge  understands  that  it  can’t  be 
done.  ► 


frank  hayes.  Computer- 
world' s  senior  news  colum¬ 
nist.  has  covered  IT  for  more  i 
than  20  years.  Contact  him  at  j 

frank_hayes@computerworld.com. 


NEW  SOFTWARE  project  isn’t 
going  well,  so  pilot  fish's  boss 
decides  to  add  a  little  levity  by 
adding  a  message  to  the  sign-on 
screen:  “When  you’re  not  look¬ 
ing,  this  screen  is  in  German.” 
Sure  enough,  next  day  a  user 
calls  the  project  manager: 

“When  the  technical  team  did 
their  maintenance  last  night, 
they  messed  something  up.  Now 
my  screens  are  in  German  when 
I’m  not  looking.” 

CLIENT  mentions  to  consultant 
pilot  fish  that  he’s  replacing  an 
OS/2  server.  “Being  an  OS/2 
fan,  I  asked  why,”  fish  says. 
“Seems  the  ’problem’  is  that  it 
never  crashes,  so  when  they 
need  to  do  work  on  it,  no  one 
can  remember  how  to  restart  it." 
The  replacement?  Windows  NT, 
“which  everyone  is  much  more 
familiar  with  restarting.” 

USER  calls  tech  pilot  fish  to  get 
a  “brand  new,  still-in-the-box" 

PC  hooked  up.  “What  kind  of  PC 
is  it?"  fish  asks.  User  is  evasive 


but  finally  comes  clean:  It’s  a 
286-based  PC  that’s  been  sitting 
in  an  unheated  warehouse  for 
about  10  years.  “But  it  should 
work  OK,”  user  insists.  “It’s 
brand  new.” 

POWER  goes  out,  and  pilot  fish 
wants  to  shut  down  the  PC  that 
runs  the  alarm-monitoring  sys¬ 
tem  (it’s  on  a  UPS,  but  its  moni¬ 
tor  isn’t).  “I  can't  see  the  mouse 
cursor,”  he  grumbles.  A  nearby 
admin  offers  helpfully,  “I  have  a 
flashlight  in  my  desk _ ” 

COMPANY  IS  in  the  middle  of 
migrating  from  one  e-mail  sys¬ 
tem  to  another,  so  help  desk  pi¬ 
lot  fish’s  first  question  to  remote 
user  is,  “Are  you  in  Lotus  Notes 
right  now?”  “No,”  puzzled  user 
replies.  “I’m  in  Topeka,  Kan." 

Feed  the  Shark:  sharky® 
computerworld.com.  You 

score  a  stylish  Shark  shirt  if  your 
true  tale  of  IT  life  sees  print  -  or 
if  it  shows  up  in  the  daily  feed  at 
computerworld.  com/sharky. 


The  5th  Wave 


vv  It's  beenttNo  clays,  Lawy.  It's  -time 
to  stop  evyoyin^  the  hevt- Computer 
SYneU  and  take  the  iHac  out  ot  -the  b&!‘ 


Word  on  the  Street: 
Migrate  to  Linux. 


On  Wall  Street,  technology  performance  means  money. That's  why  Red  Hat®  Linux® 
and  Compaq  ProLiant™  servers  quietly  power  many  of  the  world's  top  financial  firms. 

No  wonder.  Linux  is  open  source.  You  can  see  the  code.  You  stay  in  control. 

And  you  won't  get  trapped  again  by  proprietary  technology. 

Red  Hat  Linux  Advanced  Server  is  the  enterprise  platform  for  UNIX  to  Linux 
migration.  Scalable  performance.  Stabilized  releases.  Support  from  top  software 
vendors  you  already  use. 

Red  Hat  and  Compaq  —  enterprise-ready,  no  matter  what  street  you're  on. 

Go  to  www.redhat.com/explore/thestreet 


COMPAQ. 


red  hat 


1-866-2  REDH  AT 
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SQUEEZE  UP  TO  40%  OUT 
OF  YOUR  IT.  COSTS. 


Over  the  past  decade,  the  Total  Cost  of 
Ownership  (commonly  referred  to  as  TCO) 
for  server  infrastructures  has  been  moving 
in  one  direction:  up.  And  without  the 
right  solutions,  this  trend  shows 
no  sign  of  reversing  itself. 
Now  comes  the  good  news. 

When  compared  to  server 
consolidation  solutions  from 
Sun  and  Compaq,  IBM  can 
reduce  your  TCO  by  nearly 
40°/o  over  five  years!  How? 
By  enabling  servers  to 
utilize  a  higher  level  of 
capacity,  manage  work¬ 
loads  more  effectively,  and 
provide  the  reliability  needed 
to  keep  them  up  and  running. 

One  thing  that  helps  to 
make  all  of  this  possible  is  a 
powerful,  ongoing  IBM  (©server 
initiative  — which  enables  us  to 
continually  develop  new,  innovative, 
sell-managing  features  that  can  make  I.T. 
irifrastructures  more  advanced  yet  less  complex. 


The  IBM  @ server  pSeries "  690.  For  example,  with 
the  p690,  our  most  advanced  UNIX0  server, 
you  can  consolidate  multiple  workload 
environments  on  a  single  server  system. 

So  instead  of  needing  more  servers, 
you’ll  have  a  server  that  does  more. 

In  fact,  you  can  support  up  to  16 
partitions  at  once  with  hundreds 
of  configuration  options. 

And  with  the  ability  to  run 
UNIX  in  some  partitions 
and  Linux®  in  others,  you 
can  run  a  broad  range  of 
applications. 

Complimentary  CD:  Insights 
on  Infrastructure.  Want  to 
know  more?  This  CD,  created 
by  Gartner  Inc.,  covers  the  full 
spectrum  of  e-business  topics— 
from  server  consolidation  to 
security  to  TCO  — grounded  in 
real-world  examples  of  customers 
who  realized  significant  cost  savings 
and  strong  ROI.  For  your  complimentary 
CD,  call  us  or  visit  ibm.com/eserver/scon3 


FOB  YOUR  COMPLIMENTARY  CD,  LOG  ON  OR  CALL  IBM. 


(goi  ibm.com/eserver/scon3  800  426  7777,  priority  code  102AF012 


•This  comparison  is  based  on  "Value  Proposition  lot  E-Inlrastructures:  Cosi/Benefit  Case  lor  IBM  eserver '  International  Technology  Group.  2002.  IBM.  the  e-business  logo  and  pSeries  are  trademarks  or  registered  trademarks  ol  International  Business 
Machines  Corporation  in  the  United  States,  other  countries,  or  both.  UNIX  is  a  registered  trademark  ot  The  Open  Group  Linux  is  a  registered  trademark  ot  Linus  Torvalds.  ©  2002  IBM  Corporation.  All  rights  reserved. 


